Lucene search
+L

23 matches found

osv_azl
osv_azl
•added 2026/09/25 5:17 p.m.•22 views

AZL-105768 CVE-2026-67406 affecting package rabbitmq-server 3.13.7-9

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted credentials in a crash dump file. the shovel worker genserver processes does not implement the formatstatus/2...

6.5CVSS5.8AI score0.00343EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2026/09/15 1:31 p.m.•13 views

rabbitmq-server: rabbitmq-server: Information disclosure via unredacted credentials in Shovel crash logs

A flaw was found in rabbitmq-server. When the Shovel plugin worker process crashes due to network or connection failures, it fails to sanitize its internal state before logging error reports. As a result, sensitive connection details and unencrypted credentials, including plaintext passwords, are...

6.5CVSS5.7AI score0.00343EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2026/04/10 7:22 p.m.•21 views

CVE-2025-15480

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

9.1CVSS5.6AI score0.00307EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/09 6:31 p.m.•44 views

EUVD-2025-209375

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

6.9CVSS5.6AI score0.00278EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/09 4:16 p.m.•48 views

CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS0.00278EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/04/09 4:16 p.m.•23 views

CVE-2025-15480

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

9.1CVSS5.6AI score0.00307EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/04/09 4:16 p.m.•82 views

UBUNTU-CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS5.6AI score0.00278EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/09 3:03 p.m.•96 views

CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

5.6AI score0.00278EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/04/09 3:03 p.m.•28 views

CVE-2025-14551 Senstive information disclosure was affecting subiquity

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

6.9CVSS5.6AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/09 3:02 p.m.•12 views

CVE-2025-15480 Senstive information disclosure was affecting ubuntu-desktop-provision

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

6.9CVSS5.6AI score0.00307EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/09 3:02 p.m.•86 views

CVE-2025-15480

CVE-2025-15480 affects ubuntu-desktop-provision 24.04.4 in Ubuntu. If a user fails installation and submits a bug report to Launchpad, the attached logs could include the user’s password hash, leading to confidential data exposure. The impact is described as a password-hash disclosure in crash-re...

9.1CVSS5.6AI score0.00307EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/09 12:00 a.m.•25 views

PT-2026-31613

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

6.9CVSS5.6AI score0.00278EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/09 12:00 a.m.•38 views

PT-2026-31614

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

6.9CVSS5.6AI score0.00307EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2025/12/26 8:49 p.m.•293 views

0day-GigaCage-Webkit

WebKit Gigacage iOS 26.2 Advisory ID: CVE Pending...

8.7AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2015-2832

Malware in sbrugna...

4.3CVSS7.1AI score0.017EPSS
SaveExploits0References9
Citrix
Citrix
•added 2023/08/15 12:00 a.m.•23 views

Services and Virtual Servers show State: Unknown. / /var/crash filesystem full

State: Unknown. Services and Virtual Servers /shell $cat df-akin.out FilesystemSizeUsedAvail Capacity iused ifree %iusedMounted on /dev/md0429M415M5.6M99%13k44k23%/ devfs1.0k1.0k0B100%00100%/dev procfs4.0k4.0k0B100%10100%/proc /dev/ad0s1a1.6G160M1.3G11%286211k0%/flash...

7.2AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/10/06 3:15 p.m.•14 views

CVE-2021-0635

When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product:...

7.8CVSS7.2AI score0.00311EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2020/02/05 12:00 a.m.•186 views

Socat 1.7.3.4 - Heap-Based Overflow (PoC)

Exploit Title: Socat 1.7.3.4 - Heap Based Overflow PoC Date: 2020-02-03 Exploit Author: hieubl from HPT Cyber Security Vendor Homepage: http://www.dest-unreach.org/ Software Link: http://www.dest-unreach.org/socat/ Version: 1.7.3.4 Tested on: Ubuntu 16.04.6 LTS CVE : Heap-Based Overflow due to...

5.3AI score
SaveExploits0
Veracode
Veracode
•added 2019/11/08 5:31 a.m.•21 views

Information Disclosure

github.com/hashicorp/terraform is vulnerable to information disclosure. Sensitive information can be disclosed to the issue tracker when crash log files are not redacted by the operator...

1.2AI score
SaveExploits0
zdt
zdt
•added 2015/08/22 12:00 a.m.•89 views

Windows win32k.sys TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow Exploi

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=370&can=1 We have encountered a number of Windows kernel crashes in the win32k!sclApplyTranslation function while processing corrupted TTF font files, such as: ---...

9.3CVSS6.5AI score0.35562EPSS
SaveExploits3
Rows per page
Query Builder