NetworkAlarm

NetworkAlarm A command-line tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, credit card numbers sent in-the-clear, and shellshock attacks. Currently supports live monitoring and networ...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

CVE-2026-102289

The static analysis tool zizmor version 1.27.0 contains a vulnerability where debug logging serializes the application configuration, causing GitHub credentials to be written to stderr in cleartext. This occurs when tokens are supplied via environment variables (e.g., GH_TOKEN, GITHUB_TOKEN, ZIZM...

CVE-2026-70555 rConfig Core 8.2.3 < 8.2.13 Cleartext Credential Exposure via API

rConfig Core 8.2.3 before 8.2.13 contains an information disclosure vulnerability that allows authenticated users to retrieve cleartext SSH, Telnet, and enable passwords for managed devices through the device-credentials API due to automatic decryption on read and missing authorization checks...

CVE-2026-107474

The Apache Airflow connections API did not mask the apprise provider's config connection extra, which can embed notification-service credentials. A user with permission to read connections could retrieve it in cleartext, although Airflow 3 treats connection credentials as write-only. Users are...

CVE-2026-107474

The Apache Airflow connections API fails to mask the apprise provider's config connection extra, potentially exposing notification-service credentials in cleartext. A user with permission to read connections can retrieve these credentials, even though Airflow 3 generally treats connection credent...

CVE-2026-107474

The Apache Airflow connections API did not mask the apprise provider's "config" connection extra, which can embed notification-service credentials. A user with permission to read connections could retrieve it in cleartext, although Airflow 3 treats connection credentials as write-only. Users are...

CVE-2026-107474 Apache Airflow: Connections API: apprise connection "config" extra returned in cleartext

The Apache Airflow connections API did not mask the apprise provider's config connection extra, which can embed notification-service credentials. A user with permission to read connections could retrieve it in cleartext, although Airflow 3 treats connection credentials as write-only. Users are...

PT-2026-140960

Name of the Vulnerable Software and Affected Versions rConfig Core versions 8.2.3 through 8.2.12 Description Authenticated users can retrieve cleartext SSH, Telnet, and enable passwords for managed devices. This occurs because the system performs automatic decryption on read and lacks proper...

CVE-2026-102289: zizmorcore zizmor: zizmor is a static analysis tool for CI/CD systems

zizmor is a static analysis tool for CI/CD systems. In version 1.27.0, debug logging serializes the parsed application configuration with a derived Debug implementation for GitHubToken, causing credentials supplied through GHTOKEN, GITHUBTOKEN, ZIZMORGITHUBTOKEN, --gh-token, --github-token, or...

PT-2026-140274

The Apache Airflow connections API did not mask the apprise provider's config connection extra, which can embed notification-service credentials. A user with permission to read connections could retrieve it in cleartext, although Airflow 3 treats connection credentials as write-only. Users are...

CVE-2019-17662-Exploit

CVE-2019-17662 Description ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file th...

sickrageWTF

Sickrage cleartext github credentials CVE-2018-9160 1. About Exploit Title: SickRage Clear-Text Credentials in HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Contact: https://twitter.com/mezdanak Vendor Homepage: https://sickrage.github.io Software Link:...

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process. CVE-2024-42657: Summary: A vulnerability in the wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0...

CVE-2024-56428

CVE-2024-56428 Cleartext credentials in local database of the iLabClient Read out the configuration incl. password The iLabClient is used to download the results from the laboratory server. The configuration data are stored locally in the Apache Derby instance iLabClient. The password is stored i...

VulnCheck KEV: CVE-2026-81648

The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated users to invoke administrative operations, including deleting arbitrary files on the server, overwriting the payment gateway configuration an...

CVE-2019-17662

CVE-2019-17662 Description ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file th...

Docker Desktop < 4.97.0 Multiple Vulnerabilities

The version of Docker Desktop installed on the remote host is prior to 4.97.0. It is, therefore, affected by multiple vulnerabilities: - A kernel vulnerability where a container could exploit bad IPv4 checksum metadata via TUN or AFPACKET to corrupt the VM's network stack. If a packet with bad...

CVE-2026-82070

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

CVE-2026-104314

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow owner's stored third-party credentials in cleartext from the API response...