CVE-2025-10681

CVE-2025-10681：硬编码的 Azure Blob 存储帐户密钥 公告 字段| 值 ---|--- CVE| CVE-2025-10681 ICSA| ICSA-26-055-03 CVSS 3.1| 8.6（高危） 向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CWE| CWE-798（使用硬编码凭据） 研究人员| Michael Groberman — Gr0m 发布日期| 2026-02-24 产品 字段| 值 ---|--- 供应商| Gardyn 产品| Gardyn Home Kit 1.0, 2.0, 3.0,...

CVE-2026-23813

CVE-2026-23813 —— AOS-CX 预认证身份验证绕过 未认证的远程攻击者可通过 nginx 过度宽松的版本正则表达式 走私 login 令牌，从而访问 AOS-CX 管理 REST API， 暴露基于 OVSDB 的配置面（包括哈希后的 管理员凭据）。 CVE： CVE-2026-23813 CWE-287 · CVSS 9.8（严重） 厂商： HPE Aruba Networking · 产品： AOS-CX 分析文章： offseckit.com/blog/cve-2026-23813 受影响版本 分支| 受影响版本| 已修复版本 ---|---|--- 10.17....

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 基于 Aaron Herndon @ac3lives Rapid7 的原始漏洞利用程序 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ 感谢 Aaron Herndon / https://twitter.com/ac3lives / https://github.com/ac3lives/kyocera-cve-2022-1026 感谢 claude 为我创建了改进的 P...

Cve-2026-27944-Tools-Exploit

🚀 CVE-2026-27944：Nginx UI 未授权备份漏洞利用工具 📌 描述 27944.py 是针对 CVE-2026-27944 的漏洞利用工具，允许攻击者在无需认证的情况下下载并解密 Nginx UI 的备份。 此漏洞存在于 Nginx UI 版本 2.3.2 中，可导致以下数据泄露： · 用户凭据和会话令牌 · SSL 私钥 · Nginx 配置 · 数据库文件 🔧 功能 · ✅ 从目标文件中进行批量扫描 · ✅ 单个目标漏洞利用 · ✅ 自动下载备份 · ✅ 自动解密 AES-256-CBC · ✅ 自动从备份中提取凭据 🛠️ 安装方法 root@kitploit: gi...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 nuclei 模板 Dec Minio 是一个多云对象存储框架。在起始于 RELEASE.2019-12-17T23-16-33Z 且早于 RELEASE.2023-03-20T20-16-18Z 的集群部署中，MinIO 返回所有环境变量，包括 MINIOSECRETKEY 和 MINIOROOTPASSWORD，导致信息泄露。所有分布式部署的用户都受影响。建议所有用户升级到 RELEASE.2023-03-20T20-16-18Z。 漏洞信息 root@kitploit:...

CVE-2026-57131

PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.createapp mounts praisonai.jobs.router.createrouter under /api/v1/runs without authentication or per-job authorization. Network clients can submit attacker-controlled prompts and agent configuration, list and read job...

CVE-2022-43959

CVE-2022-43959 Bitrix 漏洞 CVE-2022-43959 描述 1C-Bitrix Bitrix24 的 AD/LDAP 连接器模块（版本 23.100.0 之前）中，AD/LDAP 服务器设置内的凭据保护不足，允许远程管理员通过读取 /bitrix/admin/ldapserveredit.php 的源代码发现 AD/LDAP 管理密码。 CVSS 级别| 得分| CVSS| 链接 ---|---|---|--- 中等| 4.9| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N| 链接 复现步骤： 1. 获取 Bitrix...

CVE-2026-82433

Description getNimbusConf returned the complete daemon configuration without redaction after only a user-level authorization check. Where the cluster is configured with them, that response includes storm.zookeeper.auth.payload and the keystore and truststore passwords for the Thrift, Netty and...

CVE-2023-30367-mRemoteNG-password-dumper

mRemoteNG = v1.77.3.1784-NB 密码转储工具 CVE-2023-30367 Multi-Remote Next Generation Connection Manager mRemoteNG 是一款免费软件，允许用户存储和管理多协议连接配置，以远程连接到系统。 mRemoteNG 配置文件可以以加密状态存储在磁盘上。mRemoteNG 版本 = v1.76.20 及 = 1.77.3-dev...

CVE-2026-57119 PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agentfile path in POST /api/v1/runs and passes it to the job executor without a workspace allowlist or boundary check. A remote caller can cause the server to open files...

EUVD-2026-77524

Description getNimbusConf returned the complete daemon configuration without redaction after only a user-level authorization check. Where the cluster is configured with them, that response includes storm.zookeeper.auth.payload and the keystore and truststore passwords for the Thrift, Netty and...

CVE-2026-82433

Apache Storm Nimbus and UI components are affected by a credential disclosure vulnerability. The getNimbusConf function returned the full daemon configuration without masking sensitive values after only a user-level authorization check. The UI endpoint /api/v1/cluster/configuration compounded the...

EUVD-2026-77521

Description When ZooKeeper authentication is configured, Storm deliberately retains storm.zookeeper.topology.auth.payload in the topology configuration, because workers need it. Nimbus then served that configuration verbatim to any caller holding read-only topology permissions, so a user whose on...

CVE-2026-84179 Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page

Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and returned the result without redaction in the topologyconf field of TopologyPageInfo. The Storm UI copied that value verbatim into the configuration field of GET /api/v1/topology/id and...

CVE-2026-84179

Apache Storm (Nimbus component and Storm UI) is affected by an information disclosure vulnerability in getTopologyPageInfo, which merged the Nimbus daemon configuration with the topology's own configuration and returned the result without redaction in the topology_conf field. The Storm UI copied ...

CVE-2017-8225-EXPLOIT

CVE-2017-8225 - GoAhead System.ini 泄露 该漏洞涉及无线IP摄像头（P2P）WIFICAM设备。源于对存储关键凭据的.ini文件验证不当。熟练的攻击者可以通过在URI中为loginuse和loginpas参数提供空值来利用此漏洞。具体而言，可通过路径 /system.ini?loginuse&loginpas 获得访问权限。 漏洞利用详情 为演示目的，提供了一个概念验证（PoC）漏洞利用代码。然而，在使用此漏洞利用前，务必极度谨慎并确保获得适当授权。 免责声明...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd 首先，获取 'admin' 账户的 MD5 哈希密码。 发送： GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64; rv:55.0 Gecko/20100101...

CVE-2018-9995-EXPLOIT

CVE-2018-9995 - Bypass de Autenticación en DVR Este repositorio aborda la vulnerabilidad de seguridad identificada como CVE-2018-9995, que afecta a varios dispositivos DVR, incluyendo TBK DVR4104, DVR4216, Novo, CeNova, QSee, Pulnix, XVR 5 en 1, Securus, Night OWL, DVR Login, HVR Login y MDVR...

CVE-2026-75015

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...

EUVD-2026-77461

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...