SuperMicro-Password-Scanner

Escáner de contraseñas en texto claro de Supermicro IPMI/BMC v20140622 por 1N3 https://crowdshield.com Uso: sh supermicroscan.sh proxy ACERCA DE: La implementación de IPMI/BMC de Supermicro permite a atacantes remotos no autenticados solicitar el archivo PSBlock a través del puerto 49152. Este...

PoC_CVE-2023-24055

PoCCVE-2023-24055 如何运行？ 编辑脚本中的 $User 变量，将其值替换为你的用户名。 以管理员身份打开 PowerShell 并运行脚本： ./PoCCVE-2023-24055.ps1 脚本执行后打开 KeePass。 结果保存在 C:\Users\yourusername\AppData\Local\Temp\output.xml 中。 密码以明文形式存储在： Password ExempePassword 来源 https://vulners.com/cve/CVE-2023-24055...

CVE-2025-1738

CVE-2025-1738 - Cámara Trivision NC227WF PoC 📋 Resumen Tras la divulgación responsable, se asignaron dos CVEs oficiales. CVE| CVSS v3.1| Puntuación| CWE| Tipo ---|---|---|---|--- CVE-2025-1738| AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| 6.2| CWE-598| Exposición de contraseña en texto claro 🔍...

CVE-2023-24055

免责声明 此脚本仅用于教育和演示目的。作者不支持也不纵容将此脚本用于任何犯罪或恶意活动，并且只能在获得明确许可并拥有适当授权的情况下使用。 使用此脚本时需谨慎，因为它会修改 KeePass 配置文件并删除所有先前配置的触发器。使用此脚本可能导致意外行为，甚至可能破坏 KeePass 应用程序。请自行承担风险。 简介 此脚本演示了 KeePass 至 2.53 版本（默认安装）中 争议性 的漏洞（CVE-2023-24055）。该漏洞允许拥有 XML 配置文件写入权限的攻击者通过添加导出触发器获取明文密码。请注意，供应商的立场是密码数据库本身并非旨在防范具有该级别本地 PC 访问权限的攻击...

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

BypassCredGuard

BypassCredGuard - Bypass de Credential Guard mediante el parcheo de la memoria de Wdigest Antecedentes Adam Chester @xpn escribió un artículo titulado "Exploring Mimikatz - Part 1 - WDigest" sobre el parcheo de memoria para habilitar UseLogonCredential y hacer que Wdigest almacene en caché...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055

The postgresql-operator charm contains a vulnerability where the Prometheus postgres_exporter writes the monitoring user's password in cleartext to its logs during database connection errors. An attacker with log-reading permissions can recover this password to gain read-only pg_monitor access to...

EUVD-2026-91803

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

ThinVNC 1.0b1 - Authentication Bypass

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a...

CVE-2026-104055: Insertion of Sensitive Information into Log File

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

PT-2026-104440

Name of the Vulnerable Software and Affected Versions postgresql-operator charm versions prior to 1189 arm64 and 1190 amd64 in the dev track 14/edge postgresql-operator charm versions prior to 1216 arm64 and 1217 amd64 in the stable track 14/stable Description The postgresql-operator charm utiliz...

Rocky Linux 9.6 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc (ALMALINUX9.6:CLSA-2026:1778897873)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778897873 advisory. - gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PD...

CVE-2026-90969

Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authenticated user lacking the view-password permission to obtain cleartext passwords via a request to the entry listing endpoint with password disclosure parameters...

CVE-2026-90969

Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authenticated user lacking the view-password permission to obtain cleartext passwords via a request to the entry listing endpoint with password disclosure parameters...

PT-2026-92382

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description User passwords may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. Exploitation requires the actor to...

Astra Linux – Vulnerability in Sogo

In versions of SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, SQL injection can occur. This issue is related to the cpassword = '%@' parameter in the changePasswordForLogin function...

SUSE CVE-2026-55857

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

Linux Distros Unpatched Vulnerability : CVE-2026-55857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog...