Llama-Stack-0.4.0rc3-local-CVE-2026-25211

PoC per la Perdita della Password pgvector di Llama Stack CVE-2026-25211 Proof-of-Concept Locale che dimostra l'esposizione in chiaro della password del database nei log di inizializzazione delle versioni 0.4.0rc3 di llama-stack. Panoramica Nelle versioni interessate di llama-stack precedenti all...

CVE-2026-59270

Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all available network interfaces. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

CVE-2026-59270

Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers a well-known administrative bind DN and binds its listener to all available network interfaces , exposing the credential to any network-reachable host. This affects Spring Security 5.7.0 through 7.1.0 ...

CVE-2026-59270 Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces

Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all available network interfaces. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

CVE-2026-32913

Mentre esaminavo il codice sorgente, mi sono concentrato su come OpenClaw gestisce le richieste HTTP — in particolare la funzione fetchWithSsrFGuard, responsabile delle chiamate fetch lato server. Ho notato qualcosa di strano. Quando una richiesta seguiva un reindirizzamento cross-origin ovvero i...

nCentralDumpsterDiver

SolarWinds n-Central Dumpster Diver Beschreibung / Erklärung Für weitere Informationen wurden Korrekturen/Workarounds veröffentlicht: https://vulners.com/cve/CVE-2020-7984 Diese Anwendung nutzt die nCentral-Agent-.NET-Bibliotheken, um die Agentenregistrierung zu simulieren und die...

FinalShellDecodePass

FinalShellDecodePass Ver- und Entschlüsselung /Applications/FinalShell.app/Contents/Java/finalshell.jar!/myssh/O0O0OO0OOOO0OO0000O0O0O0000O00OOO0OOOOO00000OO0O0O0OOO00OOO0O00O000OOOO0OO00000O0OO0OOO00O0000OOOOOO.class Das Feld password befindet sich in...

CVE-2026-26980-Ghost-CMS-Api

CVE-2026-26980 PoC di SQL Injection su Ghost CMS Questo repository contiene uno strumento proof-of-concept basato su Go per dimostrare e validare la vulnerabilità di SQL injection nell'API Content di Ghost CMS descritta da CVE-2026-26980. L'implementazione si basa sul flusso di exploit implementa...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

Vulnérabilité de stockage en texte clair - CVE-2023-5359 dans W3 Total Cache Cible les versions ≤2.7.5 vulnérables à CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS =...

Netgrave

Netgrave Uno strumento per recuperare le credenziali di accesso dalle telecamere IP Netwave sfruttando una vulnerabilità del dump della memoria CVE-2018-17240. Questo progetto è stato ispirato da expcamera e offre miglioramenti in termini di prestazioni ed efficienza. Questo strumento funziona su...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 шаблоны nuclei Описание Minio — это фреймворк для многоклаудного объектного хранения. В кластерном развёртывании, начиная с RELEASE.2019-12-17T23-16-33Z и до RELEASE.2023-03-20T20-16-18Z, MinIO возвращает все переменные окружения, включая MINIOSECRETKEY и...

EUVD-2026-66762

A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...

PT-2026-82782

Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote observation. This undermines the confidentiality of device access...

PT-2026-82777

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

DEBIAN-CVE-2026-80158

A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with nolog, unlike the sibling password parameter in the same module. As a...

CVE-2026-80158

A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with nolog, unlike the sibling password parameter in the same module. As a...

htb-facts

HTB — Facts Easy/Linux - Stagione 10 Riepilogo Facts è una macchina Linux di livello facile che richiede lo sfruttamento di una vulnerabilità nota CVE-2025-2304 in Camaleon CMS per estrarre le credenziali locali di AWS S3. L'enumerazione dei bucket S3 interni rivela una chiave privata SSH che dev...

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232...

CVE-2026-58070

A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...

CVE-2026-80158

A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with nolog, unlike the sibling password parameter in the same module. As a...