veeam-cve-2023-27532-mock

CVE-2023-27532 - Schwachstelle in Veeam Backup & Replication Beschreibung der Schwachstelle Veeam Backup & Replication enthält eine Schwachstelle, die es ermöglicht, verschlüsselte Anmeldedaten aus der Konfigurationsdatenbank zu erlangen, sodass Angreifer auf Hosts der Backup-Infrastruktur...

CVE-2025-45620

Problemdetails Kameramodell PTC310UV2 mit Firmware-Version 0.1.0000.59. Die Schwachstelle befindet sich in der Weboberfläche, die für den Zugriff auf die Kamera verwendet wird. Die Schwachstelle wurde während eines Penetrationstests entdeckt, daher wurden bestimmte Informationen in den...

Oblivion

Oblivion è uno strumento focalizzato sul monitoraggio in tempo reale di nuove fughe di dati, notificando se le credenziali dell'utente sono state compromesse. È anche possibile verificare se qualche credenziale dell'utente è stata compromessa in precedenza. Oblivion ha due modalità: Oblivion...

EUVD-2026-67281

Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote observation. This undermines the confidentiality of device access...

EUVD-2026-67314

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

EUVD-2026-67290

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2026-73839

Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote observation. This undermines the confidentiality of device access...

CVE-2026-69658

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2025-50110

CVE-2025-50110 Trasmissione in chiaro di informazioni sensibili nell'applicazione Android EagleEyes Lite 1. Panoramica Nome : EagleEyesLite Versione : 2.0.0 Fornitore : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query...

Security Bulletin: Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7775)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed Cross-site Scripting security vulnerability Vulnerability Details CVEID:CVE-2026-7775 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM...

CVE-2022-43959

CVE-2022-43959 Vulnerabilità Bitrix CVE-2022-43959 Descrizione Credenziali insufficientemente protette nelle impostazioni del server AD/LDAP nel modulo di connettore AD/LDAP di 1C-Bitrix Bitrix24 precedente alla versione 23.100.0 consentono ad amministratori remoti di scoprire una password...

CVE-2026-73839

CVE-2026-73839 affects the Ebyte NE2-D11 device, where administrative credentials may be exposed in plaintext within the device's management interface. This allows an attacker with physical access (or remote visual observation) to compromise device credentials, impacting confidentiality of device...

CVE-2026-73839 Ebyte NE2-D11 Insufficiently Protected Credentials

Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote observation. This undermines the confidentiality of device access...

CVE-2025-24071

CVE-2025-24071 Dieses Python-Skript dient zur Demonstration der CVE-2025-24071 -Sicherheitslücke im Windows-Explorer. Diese Schwachstelle ermöglicht es einem Angreifer, netNTLMv2 -Anmeldeinformationen von einem Opfer zu erfassen, ohne dass das Opfer selbst direkt interagieren muss. Beschreibung D...

CVE-2026-81530

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

EUVD-2026-67214

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

agentZ

AgentZ Piattaforma Agentica AI Zero Trust Costruisci, esegui e governa agenti AI. Sicura by design. Ogni agente viene eseguito all'interno di una sandbox con negazione predefinita e non riceve mai una credenziale. Ogni azione dell'agente è tracciabile. AgentZ è una piattaforma multi-tenant per...

CVE-2026-81715

opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...

CVE-2026-81098

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...

CVE-2025-25968

CVE-2025-25968: Vulnerabilità di controllo degli accessi improprio in DDSN Interactive cm3 Acora CMS versione 10.1.1 DDSN Interactive cm3 Acora CMS versione 10.1.1 contiene una vulnerabilità di controllo degli accessi improprio. Un utente con privilegi di editor può accedere a informazioni...