CVE-2023-23752

이것은 CVE-2023-23752에 대한 POC로, Python으로 작성되었으며 사용자 이름 및 비밀번호 정보를 표시합니다. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py 스크립트 실행은 아래 GIF에서 보여줍니다:...

CVE-2024-33113

CVE-2024-33113 D-LINK DIR-845L 라우터는 bscsmsinbox.php 파일을 통해 정보 공개Information Disclosure에 취약합니다. CVE-2024-33113은 D-LINK DIR-845L 라우터의 취약점으로, bscsmsinbox.php 파일을 통해 정보가 공개될 수 있습니다. 이 취약점은 include 함수의 부적절한 처리로 인해 발생하며, $file 변수를 조작하여 악용할 수 있습니다. 이를 통해 공격자는 임의의 PHP 스크립트를 포함시키고, 잠재적으로 라우터의 사용자 이름과 비밀번호...

Electrolink FM/DAB/TV Transmitter - Credentials Disclosure

A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 allows unauthorized attackers to access credentials in plaintext. id: CVE-2025-28228 info: name: Electrolink FM/DAB/TV Transmitter - Credentials Disclosure...

FacturaScripts - Unauthenticated phpinfo Disclosure

Detected FacturaScripts exposes a debug branch in the Installer controller that calls phpinfo when the request carries the phpinfo=TRUE query parameter, and on an instance that has not finished installation, this endpoint was reachable without authentication. id: CVE-2026-42878 info: name:...

CVE-2022-35513

blink1-pass-decrypt ⭐ blink1control2 설치버전 =2.2.7의 API 서버에 있는 /blink/input에서 발견되는 암호문을 복호화하도록 설계된 PoC 및 간단한 스크립트입니다. 익스플로잇 - CVE-2022-35513 ❗ blink1control2 앱은 취약한 비밀번호 암호화와 안전하지 않은 저장 방식을 사용하며, 이는 API 서버의 /blink1/input URL에 접근하여 확인할 수 있습니다. Skype 로그인 및 이메일의 비밀번호 암호문이 나열되어 있으며 복호화할 수 있습니다. 사전 요구 사...

D-Link DIR-859 - Information Disclosure

A critical information disclosure vulnerability exists in D-Link devices where sensitive device account information including credentials can be retrieved by sending an unauthenticated request to /getcfg.php endpoint with the parameter SERVICES=DEVICE.ACCOUNT. This could allow attackers to obtain...

Glances - Information Disclosure

Glances 4.5.2 contains an information disclosure vulnerability caused by the web server running without authentication by default, letting remote attackers access sensitive system information including credentials, exploit requires no special privileges. id: CVE-2026-32596 info: name: Glances -...

Glances - Information Disclosure

Glances 4.5.1 contains an information disclosure vulnerability caused by unfiltered exposure of sensitive configuration data via the /api/4/config REST API endpoint, letting remote attackers access credentials, exploit requires API access. id: CVE-2026-30928 info: name: Glances - Information...

Paused shared dashboard access tokens still expose data source configuration

Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard’s data sources, including stored credential...

CVE-2026-67236

The messaging and streaming broker RabbitMQ is vulnerable in versions 4.2.0 through 4.2.8 and 4.3.2 . A successful POST /login request causes the is_authorized/2 function to set an authentication cookie containing base64-encoded username and password credentials. These cookies lack HttpOnly , Sec...

CVE-2026-95667 MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

The MISP installer scripts for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4 create a log file at /var/log/mispinstall.log and a named pipe FIFO at /var/log/mispinstall.log.pipe to capture all installer output. The log captures highly sensitive data including the generated admin password,...

CVE-2026-94215: Missing Authorization

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs because the API uses a per-request in-memory cache to resolve clients by their unique identifier without verifying if the client belongs to the realm specified in the reque...

CVE-2026-92917 Grav 2.0.0-rc.1 through 2.0.21 Configuration Disclosure via print_r

Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters printr, vardump, jsonencode, yamlencode, string: GravExtension::assertSandboxDumpSafe determines sandbox state by calling SandboxExtension::isSandboxed without...

AZL-103152 CVE-2026-81870 affecting package docker-buildx 0.14.0-17

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

EUVD-2026-79941

Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...

CVE-2026-92237

Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...

EUVD-2026-78907

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allowed an authenticated user to access sensitive credentials and tokens without transiting the expected proxy due to...

EUVD-2026-77808

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtual table modules such as csvreader and logreader through its MySQL-compatible server port without authentication, authorization, or directory restrictions. A remote attacker can...

EUVD-2026-77482

Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and returned the result without redaction in the topologyconf field of TopologyPageInfo. The Storm UI copied that value verbatim into the configuration field of GET /api/v1/topology/id and...

CVE-2026-75015 Apache Syncope: Nested secrets leak cleartext into audit records readable

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...