CVE-2020-24227

CVE-2020-24227 Playground Sessions - 사용자 자격 증명을 평문으로 저장 Playground Sessions v2.5.582 및 이전 버전 for Windows는 사용자 자격 증명을 평문으로 저장하여 C:\Users\AppData\Roaming\Playground\Local StoreSharedObjects\Playground.swf\UserProfiles.sol에 접근할 수 있는 사람이 이메일과 비밀번호를 추출할 수 있도록 합니다. 로그인 페이지: 비밀번호: 공개 타임라인: 2020년 8월 18일 ...

DiscoRape

DiscoRape DiscoRape는 python3.8로 작성된 Discord용 셀프봇입니다. 이 저장소를 포크한 원본 저장소는 여기 EC-discord 제작에서 확인할 수 있습니다. 미리보기 📝 설치/실행 pip3 install -r requirements.txt 토큰을 data/config.json에 추가하세요. python3 selfbot.py로 실행하세요. 또는 를 사용할 수 있습니다. 지원/기여 지원을 받으려면 아래 링크에서 내 지원 Discord에 가입하거나 또는 여기서 이슈/풀 리퀘스트를 열 수 있습니다...

steamer

Steamer 공개된 데이터 덤프를 가져오고, 관리하고, 검색하세요. 거대한 CSV, .sql, .txt 파일에 자격 증명, 비밀번호, 해시가 가득 들어있나요? Steamer로 관리하세요! MongoDB 데이터베이스에 로드한 다음, 콘솔을 직접 사용하거나 편리한 웹 인터페이스JSON 내보내기 포함를 사용하세요. 설치 Go와 MongoDB를 설치하세요. 의존성은 go.mod의 Go 모듈을 통해 관리됩니다. 따라서 Go가 필요한 모듈을 찾을 수 없으면 자동으로 다운로드합니다. 이 시점에서는 인덱스가 필요하지 않은 간단한 침해 사고...

carina

Carina 소개 Carina 는 웹쉘, VPSVirtual Private Server 및 cPanel 데이터를 저장하는 데 사용되는 웹 애플리케이션입니다. Carina 는 웹쉘, VPS 또는 cPanel 데이터를 "이상한 장소"에 저장할 필요가 없도록 만들어졌습니다. Carina 설치 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. composer update를 실행하세요. 3. 데이터베이스 설정에 맞게 .env.example을 수정하세요. 4...

CVE-2026-100581 OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension

OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access to unencrypted device backups or extracted App Group containers can recover valid Gateway tokens and passwords to authenticate with operat...

CVE-2026-100581 OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension

OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access to unencrypted device backups or extracted App Group containers can recover valid Gateway tokens and passwords to authenticate with operat...

EUVD-2026-70261

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

CVE-2026-75136

UpSignOn for Windows versions prior to 7.19.0 contain an insecure credential storage flaw in the biometric unlock key managed via the Windows PasswordVault API. A local attacker running a standard process within the same Windows session can retrieve the key without triggering any authentication p...

CVE-2026-75136 UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVault

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

PT-2026-84858

Name of the Vulnerable Software and Affected Versions UpSignOn for Windows versions prior to 7.19.0 Description Insecure credential storage allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering an authentication prompt. A standard...

CVE-2026-75136: Insufficiently Protected Credentials

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

CVE-2026-53454

Prior to version 2.5.2, Blueprint Studio configured Git's credential.helper store, writing usernames and access tokens in plaintext to a .git-credentials file accessible to other users/processes on the same filesystem, exposing Home Assistant Git credentials; the issue is fixed in 2.5.2. No explo...

CVE-2026-53454 Blueprint Studio stored Git credentials in plaintext Git credential store

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials fi...

EUVD-2026-61485

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials fi...

CVE-2026-53454 Blueprint Studio stored Git credentials in plaintext Git credential store

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials fi...

CVE-2026-66782 Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps

A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account SA bearer token within the Submariner Custom Resource CR specification. An attacker with access to the cluster's etcd database or through kubectl get commands could obtai...

PT-2026-77314

Name of the Vulnerable Software and Affected Versions Blueprint Studio versions prior to 2.5.2 Description Blueprint Studio improperly configures the Git credential.helper store when saving credentials. This causes the system to persist usernames and access tokens in plaintext within the...

EUVD-2026-55880

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects and decrypt the stored credentials. Successful...

CVE-2025-15631 Weak Credential Storage in TP-Link Omada Devices

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized acces...

CVE-2025-15631

CVE-2025-15631 describes a cryptographic weakness in TP-Link Omada devices where site credentials are protected with a legacy hashing algorithm that does not provide sufficient protection. The affected component is credential storage on Omada devices; the root cause is the use of an inadequate ha...