firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Kyoceraプリンタにおける認証不要のデータ抽出脆弱性。アドレス帳とドメイン参加パスワードを平文で取得することが可能です。 脆弱性の概要 2021年にペネトレーションテストを行っていた際、プリンタをリモート管理するためのKyoceraのシッククライアントアプリケーションを調査していました。アプリケーションからのトラフィックをプロキシしているときに、KyoceraのSOAP API（ポート9091/TCP）が、機密性の高い操作を実行する際に認証を適切に処理していないことを発見しました。Kyocera...

CVE-2024-56428

CVE-2024-56428 Cleartext credentials in local database of the iLabClient Read out the configuration incl. password The iLabClient is used to download the results from the laboratory server. The configuration data are stored locally in the Apache Derby instance iLabClient. The password is stored i...

NetworkAlarm

NetworkAlarm A command-line tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, credit card numbers sent in-the-clear, and shellshock attacks. Currently supports live monitoring and networ...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

CVE-2026-82288 Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradioauth and apiauth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured...

CVE-2026-82288 Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradioauth and apiauth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured...

CVE-2019-17662

CVE-2019-17662 Descrizione ThinVNC 1.0b1 è vulnerabile alla lettura arbitraria di file, che porta alla compromissione del server VNC. La vulnerabilità esiste anche quando l'autenticazione è attivata durante la distribuzione del server VNC. La password per l'autenticazione è memorizzata in chiaro ...

CVE-2019-17662-Exploit

CVE-2019-17662 Descrizione ThinVNC 1.0b1 è vulnerabile a lettura arbitraria di file, che porta a un compromesso del server VNC. La vulnerabilità esiste anche quando l'autenticazione è attivata durante la distribuzione del server VNC. La password per l'autenticazione è memorizzata in chiaro in un...

CVE-2026-81691

opensslencrypt versions before 1.4.9 fail to validate server URLs in login and registerwithemail functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including clientid, passwords, and JWTs to achieve full keyserve...

EUVD-2026-67047

opensslencrypt versions before 1.4.9 fail to validate server URLs in login and registerwithemail functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including clientid, passwords, and JWTs to achieve full keyserve...

sickrageWTF

Credenziali GitHub in chiaro di Sickrage CVE-2018-9160 1. Informazioni Titolo dell'exploit: Credenziali in chiaro di SickRage nella risposta HTTP Data: 2018-04-01 Autore dell'exploit: Sven Fassbender Contatto: https://twitter.com/mezdanak Homepage del fornitore: https://sickrage.github.io Link de...

EUVD-2026-66762

A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 Ein Problem im wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 ermöglicht es einem entfernten Angreifer, vertrauliche Informationen durch die fehlende Verschlüsselung während des Anmeldeprozesses zu erlangen. CVE-2024-42657: Zusammenfassung: Eine Schwachstelle im...

Astra Linux – Vulnerability in Lynx

Lynx versions up to 2.8.9 mishandled the userinfo subcomponent of a URI, allowing remote attackers to discover cleartext credentials, as these credentials might appear in SNI data...

CVE-2026-19683

CVE-2026-19683 affects TP-Link Omada Gateways: DDNS credentials are sent over an unencrypted channel, exposing them to network observers who could steal credentials or tamper with DNS records. Exploitation requires DDNS to be configured and an attacker on the path. No patch or exploit details are...

EUVD-2026-62941

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...

CVE-2026-76376

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...

CVE-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

CVE-2026-15806

In Python's urllib.request, HTTPPasswordMgr ignored URL scheme when matching stored credentials, allowing HTTPS credentials to be sent over HTTP if an attacker redirected or downgraded the client, exposing them in cleartext. The fix scopes credential matching by scheme while preserving bare-autho...