sickrageWTF

Credenciales de GitHub en texto claro en Sickrage CVE-2018-9160 1. Acerca de Título del Exploit: Credenciales en texto claro en la respuesta HTTP de SickRage Fecha: 2018-04-01 Autor del Exploit: Sven Fassbender Contacto: https://twitter.com/mezdanak Página del proveedor: https://sickrage.github.i...

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 中的一个问题允许远程攻击者通过登录过程中缺乏加密的方式获取敏感信息。 CVE-2024-42657: 摘要：wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 中的一个漏洞允许未经身份验证的远程攻击者在登录过程中获取敏感信息。该问题源于登录凭证传输时缺乏加密，使其容易通过中间人（MITM）攻击被截获。 详情：wishnet Nepstech Wifi Router...

NetworkAlarm

NetworkAlarm Una herramienta de línea de comandos para monitorear el tráfico de red local en busca de posibles vulnerabilidades de seguridad. Advierte al usuario sobre posibles escaneos de nmap, escaneos de Nikto, credenciales enviadas en texto claro, números de tarjeta de crédito enviados en tex...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Una vulnerabilidad de extracción de datos no autenticada en impresoras Kyocera, que permite recuperar la libreta de direcciones en texto claro y las contraseñas de dominio. Resumen de la vulnerabilidad A finales de 2021, durante una prueba de penetración, estaba experimentan...

CVE-2024-56428

CVE-2024-56428 Cleartext credentials in local database of the iLabClient Read out the configuration incl. password The iLabClient is used to download the results from the laboratory server. The configuration data are stored locally in the Apache Derby instance iLabClient. The password is stored i...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

CVE-2026-63207

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext through the integration administration API. Certain responses do not consistently mask sensitive fields, so configured...

CVE-2026-63207

The open-source helpdesk system Zammad versions 7.0.3 and 7.1.1 is vulnerable to sensitive information exposure. An authenticated administrator can exploit the integration administration API to obtain stored integration credentials in cleartext . The root cause is that certain API responses fail ...

CVE-2026-63207 Zammad: Sensitive Information Exposure in Integration Administration API

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext through the integration administration API. Certain responses do not consistently mask sensitive fields, so configured...

CVE-2026-63207: Exposure of Sensitive Information to an Unauthorized Actor

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored integration credentials in cleartext through the integration administration API. Certain responses do not consistently mask sensitive fields, so configured...

CVE-2026-14442

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support save jobs or related operational tasks are executed, sensitive parameters including external server passwords and...

CVE-2019-17662

CVE-2019-17662 Descripción ThinVNC 1.0b1 es vulnerable a la lectura arbitraria de archivos, lo que lleva a comprometer el servidor VNC. La vulnerabilidad existe incluso cuando la autenticación está activada durante el despliegue del servidor VNC. La contraseña de autenticación se almacena en text...

CVE-2019-17662-Exploit

CVE-2019-17662 描述 ThinVNC 1.0b1 存在任意文件读取漏洞，可导致 VNC 服务器被攻破。即使在部署 VNC 服务器时开启了身份验证，该漏洞仍然存在。身份验证密码以明文形式存储在一个可通过 ../../ThinVnc.ini 目录遍历攻击向量读取的文件中。 NIST 用法 $ ./bin/CVE-2019-17662 -h 用法: ./CVE-2019-17662 -u URL -f 文件 选项: 选项 描述 -u URL Base URL -f 文件 可选 要查询的文件名 默认: ThinVnc.ini $ ./bin/CVE-2019-17662 -u...

CVE-2026-14442: Insertion of Sensitive Information into Log File

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support save jobs or related operational tasks are executed, sensitive parameters including external server passwords and...

CVE-2026-92882: Insufficiently Protected Credentials

Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk 2.5.0p15, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an authenticated user who may view a host's configuration to read stored SNMP community strings, SNMPv3 auth and privacy pass phrases an...

EUVD-2025-210925

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

CVE-2025-56565

The DD-WRT firmware deployed on TP-Link TL-WR740N v1 through v4 hardware contains a vulnerability where sensitive authentication credentials are stored in cleartext within non-volatile memory. Exposed information includes SSH private keys , dynamic DNS passwords, email notification credentials, a...

Astra Linux – Vulnerability in Lynx

Lynx versions up to 2.8.9 mishandled the userinfo subcomponent of a URI, allowing remote attackers to discover cleartext credentials, as these credentials might appear in SNI data...

CVE-2026-31278

Suprema BioStar 2 (before 2.9.12 ) and BioStar X (before 1.0.2 ) expose Active Directory service account credentials in cleartext via a crafted GET request to the /api/v2/setting/adserversetting endpoint. The vulnerability requires low privileges and has a changed scope , as the leaked credential...

CVE-2026-31278

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request...