66 matches found
RemotePasswordWiFi
RemotePasswordWiFi 通过默认密码获取远程路由器密码。 支持的路由器： Thomson Thechnicolor 即将支持： bee cisco...
CVE-2017-7921
CVE-2017-7921 CVE-2017-7921-EXP Hikvision camera This tool is primarily intended for penetration testers with legal authorization and website administrators performing routine operations. Anyone must not use it for illegal purposes or profit-making, otherwise the consequences shall be borne by th...
hikihack
📚 文档与插图 为补充对 CVE-2017-7921 漏洞的分析，现提供多种资源。这些资源旨在帮助了解易受攻击设备可能造成的后果、安全更新的重要性以及安全加固的最佳实践。 本仓库中展示的所有演示均在 经授权的测试环境 中完成，目的仅限于教育、研究和网络安全意识提升。在发布前，所有敏感信息（账号、密码、IP 地址、序列号、主机名及其他机密数据）均已 匿名化或模糊处理 ，以保护隐私。 📄 防护报告 本仓库附带一份详细的技术报告，其中主要包括： 对 CVE-2017-7921 漏洞的描述； 受影响的产品与版本； 易受攻击设备暴露所带来的风险； 对系统机密性、完整性和可用性的潜在影响；...
CVE-2026-75960 Insufficiently Protected Credentials in Rently Smart Home
Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...
CVE-2026-62214
OpenClaw Bot Framework (versions before 2026.5.28) contains an input validation flaw in serviceUrl parameters that enables SSRF-style access by lower-trust callers. This misvalidation can allow retrieval of bot tokens and credentials by supplying malicious serviceUrl values through configured inp...
CVE-2026-14867
PcVue projects store credentials for built-in users insecurely in the User directory, affecting all versions before 17.0.0. A local attacker could retrieve these credentials, impacting confidentiality. Active Directory accounts are not affected. The provided documents do not include explicit reme...
PT-2026-56173
Name of the Vulnerable Software and Affected Versions PcVue versions prior to 17.0.0 Description Credentials for built-in users are stored insecurely within the User directory of projects. This allows a local attacker to retrieve these credentials. Active Directory accounts are not affected by th...
Automated Logic WebCTRL Storing Passwords in a Recoverable Format (CVE-2025-14295)
CWE-257 Storing Passwords in a Recoverable Format vulnerability exists in Automated Logic WebCTRL and Carrier i-Vu Building Automation System products. An attacker with elevated access can retrieve passwords stored in a recoverable format, potentially compromising credentials and neighboring...
PT-2026-31694
Name of the Vulnerable Software and Affected Versions OpenPLC V3 affected versions not specified Description OpenPLC V3 is susceptible to a flaw involving the storage of passwords in plaintext. This could allow an attacker to obtain credentials and access sensitive information. Recommendations At...
EUVD-2025-206310
Insufficiently Protected Credentials vulnerability in the Credential Field of Milner ImageDirector Capture allows retrieval of credential material and enables database access.This issue affects ImageDirector Capture: from 7.0.9 through 7.6.3.25808...
CVE-2025-58741
Insufficiently Protected Credentials vulnerability in the Credential Field of Milner ImageDirector Capture allows retrieval of credential material and enables database access.This issue affects ImageDirector Capture: from 7.0.9 through 7.6.3.25808...
CVE-2025-58741 Insecure Masked Credential Fields Enable Database Credential Access in Milner ImageDirector Capture
Insufficiently Protected Credentials vulnerability in the Credential Field of Milner ImageDirector Capture allows retrieval of credential material and enables database access.This issue affects ImageDirector Capture: from 7.0.9 through 7.6.3.25808...
CVE-2021-27392
A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...
CVE-2021-31857
In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...
CVE-2025-59379
DwyerOmega Isensix Advanced Remote Monitoring System ARMS 1.5.7 allows an attacker to retrieve sensitive information from the underlying SQL database via Blind SQL Injection through the user parameter in the login page. This allows an attacker to steal credentials, which may be cleartext, from...
Siklu MultiHaul TG Series 访问控制错误漏洞
The Siklu MultiHaul TG Series is a series of wireless transmission devices from Siklu designed to provide a reliable high-speed data transmission solution specifically suited for fixed wireless access and connectivity needs in dense urban environments. An Access Control Error vulnerability exists...
CVE-2025-9982
CVE-2025-9982 affects QuickCMS 6.8. The vulnerability is due to sensitive admin credentials hardcoded in a plaintext configuration file, allowing attackers with access to the source code or server filesystem to retrieve credentials and potentially escalate privileges. Only version 6.8 was tested ...
EUVD-2018-8075
Malware in sbrugna...