Invoke-WCMDump

Invoke-WCMDump PowerShell 脚本，用于从凭据管理器中转储 Windows 凭据 Invoke-WCMDump 枚举凭据管理器中的 Windows 凭据，然后提取每个凭据的可用信息。对于“Generic”类型的凭据，可以检索密码；对于“Domain”类型的凭据，则无法通过相同方法检索。仅返回当前用户的凭据。 不需要管理员权限！ 作者：Barrett Adams（@peewpw） 示例 root@kitploit: PSImport-Module .\Invoke-WCMDump.ps1 PSInvoke-WCMDump Username : testusername...

EUVD-2026-15943

n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition...

CVE-2026-33663 n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with the global:member role could exploit chained authorization flaws in n8n's credential pipeline to steal plaintext secrets from generic HTTP credentials httpBasicAuth,...

CVE-2026-33663

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with the global:member role could exploit chained authorization flaws in n8n's credential pipeline to steal plaintext secrets from generic HTTP credentials httpBasicAuth,...

ZTE ZXHN-F660T和ZTE ZXHN-F660A 安全漏洞

The ZTE ZXHN-F660T and ZTE ZXHN-F660A are both fiber optic terminal devices from ZTE Corporation ZTE, China. A security vulnerability exists in the ZTE ZXHN-F660T and ZXHN-F660A, which stems from the use of generic credentials and could lead to unauthorized access...

OWASP Top 10 Deep Dive: Identification and Authentication Failures

In the 2021 edition of the OWASP top 10 list, Broken Authentication was changed to Identification and Authentication Failures. This term bundles in a number of existing items like cryptography failures, session fixation, default login credentials, and brute-forcing access. Additionally, this...