Code injection

Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP requests...

CVE-2018-17969

Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP requests...

CVE-2018-17969

Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP requests...

CVE-2018-17969

CVE-2018-17969 affects Samsung SCX-6545X printers (V2.00.03.01) and enables remote disclosure of cleartext credentials via SNMP requests (OIDs: iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and .6.0). The Connected documents corroborate credential disclosure via SNMP, describing the affected device and d...

CVE-2018-17969

Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP requests...

CVE-2018-17613

Telegram Desktop aka tdesktop 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol...

CVE-2017-17691

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack...

Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure

-- coding: utf-8 -- Exploit Title: Ericsson-LG iPECS NMS - Cleartext Cred. Dump Vendor Notification: 03-03-2018 - No response Initial CVE: 04-04-2018 Disclosure: 21-04-2018 Exploit Author: Berk Cem Göksel Contact: twitter.com/berkcgoksel || bgoksel.com Vendor Homepage: http://www.ipecs.com/...

CVE-2018-10024

ubiQuoss Switch VP5208A creates a bcmpassword file at /cgi-bin/ with the user credentials in cleartext when a failed login attempt occurs. The file can be reached via an HTTP request. The credentials can be used to access the system via SSH or TELNET if it is enabled...

CVE-2018-10024

The vulnerability CVE-2018-10024 affects UbiQuoss Switch VP5208A. On a failed login attempt, the device creates a bcm_password file at /cgi-bin/ containing user credentials in cleartext, which can be retrieved via an HTTP request. These credentials can be used to access the system via SSH (or TEL...

CVE-2018-9160

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

Hardcoded credentials

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

CVE-2018-9160

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

PYSEC-2018-101

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

CVE-2018-9160

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

PYSEC-2018-101

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

CVE-2018-9160

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses...

CVE-2018-9160

SickRage before v2018.03.09-1 exposes credentials in plaintext via HTTP responses, allowing an attacker to view saved GitHub (and other) credentials. The root cause is that HTTP responses leak sensitive data. Affected are SickRage installations prior to 2018.03.09-1. Remediation: upgrade to v2018...

Hardcoded credentials

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smintencrypt Hardcoded AES Key that can be used for packet decryption obtaining cleartext credentials by an attacker who has access to a wired port...

CVE-2018-5797

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smintencrypt Hardcoded AES Key that can be used for packet decryption obtaining cleartext credentials by an attacker who has access to a wired port...