CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 中的一个问题允许远程攻击者通过登录过程中缺乏加密的方式获取敏感信息。 CVE-2024-42657: 摘要：wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 中的一个漏洞允许未经身份验证的远程攻击者在登录过程中获取敏感信息。该问题源于登录凭证传输时缺乏加密，使其容易通过中间人（MITM）攻击被截获。 详情：wishnet Nepstech Wifi Router...

CVE-2024-56428

CVE-2024-56428 iLabClient 本地数据库中的明文凭据 读取包含密码的配置 iLabClient 用于从实验室服务器下载结果。配置数据 存储在本地 Apache Derby 实例 iLabClient 中。密码以明文形式存储。为了能够读取该密码，必须首先建立到本地数据库的连接，例如按照 CVE-2024-56429 中描述的方式操作。 读取密码： root@kitploit: select EINSTELLUNGEN from configs; 自动化脚本 可以执行 getconfigs.sh 脚本以读取配置数据。需要注意的是， 在执行期间，不得有其他程序（例如...

NetworkAlarm

NetworkAlarm ローカルネットワークトラフィックを監視し、潜在的なセキュリティ脆弱性を検出するコマンドラインツール。nmapスキャン、Niktoスキャン、平文で送信された資格情報、平文で送信されたクレジットカード番号、Shellshock攻撃に対する警告をユーザーに通知します。現在、ライブ監視とネットワークキャプチャ（pcap）スキャンをサポートしています。 脆弱性監視 nmapスキャン NULL、FYN、XMASステルス攻撃から保護 注: ステルス性のないスキャンは保護対象外です。サーバーログでスキャンの有無を確認してください Niktoスキャン...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Kyocera 打印机中存在一个未认证的数据提取漏洞，该漏洞允许恢复明文形式的通讯录和域绑定密码。 漏洞概述 早在 2021 年的一次渗透测试中，我在摆弄 Kyocera 用于远程管理打印机的胖客户端应用程序。在对该应用程序的流量进行代理时，我发现 Kyocera 在 9091/TCP 端口上的 SOAP API 在执行敏感操作时未正确处理身份验证。Kyocera MFP 可以配置用于公司域绑定的凭据、FTP 凭据、文件共享凭据等。在未认证的情况下，可以以明文形式检索 MFP 存储的所有凭据。 我的完整分析文章可在 Rapid7...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

CVE-2019-17662

CVE-2019-17662 説明 ThinVNC 1.0b1 には任意のファイル読み取りの脆弱性があり、VNC サーバーの侵害につながります。この脆弱性は、VNC サーバーの導入時に認証が有効になっている場合でも存在します。認証用のパスワードは平文でファイルに保存されており、../../ThinVnc.ini ディレクトリトラバーサル攻撃ベクトルによって読み取ることができます。 NIST エクスプロイトのコンパイル方法 root@kitploit: $ git clone https://github.com/whokilleddb/CVE-2019-17662 $ cd...

CVE-2019-17662-Exploit

CVE-2019-17662 描述 ThinVNC 1.0b1 存在任意文件读取漏洞，可导致 VNC 服务器被攻破。即使在部署 VNC 服务器时开启了身份验证，该漏洞仍然存在。身份验证密码以明文形式存储在一个可通过 ../../ThinVnc.ini 目录遍历攻击向量读取的文件中。 NIST 用法 root@kitploit: $ ./bin/CVE-2019-17662 -h 用法: ./CVE-2019-17662 -u URL -f 文件 选项: 选项 描述 -u URL Base URL -f 文件 可选 要查询的文件名 默认: ThinVnc.ini root@kitploit...

sickrageWTF

Sickrage cleartext github credentials CVE-2018-9160 1. About Exploit Title: SickRage Clear-Text Credentials in HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Contact: https://twitter.com/mezdanak Vendor Homepage: https://sickrage.github.io Software Link:...

Astra Linux – Vulnerability in Lynx

Lynx versions up to 2.8.9 mishandled the userinfo subcomponent of a URI, allowing remote attackers to discover cleartext credentials, as these credentials might appear in SNI data...

CVE-2026-31278

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request...

CVE-2026-31278

Suprema BioStar 2 (before 2.9.12 ) and BioStar X (before 1.0.2 ) expose Active Directory service account credentials in cleartext via a crafted GET request to the /api/v2/setting/adserversetting endpoint. The vulnerability requires low privileges and has a changed scope , as the leaked credential...

PT-2026-91010

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request...

Release Information for Veeam Plug-In for Microsoft Azure 9.1

Release Information 13.9.1.407 2026-09-08 Resolved issues General Storage account credentials are stored in plain text on worker appliances. Configuration Backup Configuration backup for the managed backup appliance fails after upgrading Veeam Backup & Replication to version 13.1. Under certain...

CVE-2026-17442

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext...

CVE-2026-17442

IBM App Connect Enterprise (13.0.1.0–13.0.8.1, 12.0.1.0–12.0.12.28) and IBM Integration Bus for z/OS (10.1.0.0–10.1.0.7) are affected by a local information disclosure vulnerability in their Adapter nodes . Credentials are written to trace logs in cleartext , allowing a local attacker with no pri...

CVE-2026-17442 IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext...

EUVD-2026-71473

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext...

UBUNTU-CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

Linux Distros Unpatched Vulnerability : CVE-2026-85089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in...

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...