CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Improper Access Control Description In version 6.03 of BoltWire CMS , it is possible to exploit an “Improper Access Control” vulnerability, through the index.php?p=member.admin&action=data parameter, allowing an attacker to view any member's password, including t...

CVE-2023-39144

CVE-2023-39144 Background I discovered this vulnerability in May of 2023. Element55 produces software for law offices to track time. This software pulls information from various locations, such as Exchange, SQL, and Shoretel. Timeline May 24, 2023 - Reported vulnerability to Element 55 May 25, 20...

CVE-2025-1738

CVE-2025-1738 - Trivision Camera NC227WF PoC 📋 Overview Following responsible disclosure, two official CVEs were assigned. CVE| CVSS v3.1| Score| CWE| Type ---|---|---|---|--- CVE-2025-1738| AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| 6.2| CWE-598| Cleartext Password Exposure 🔍 CVE-2025-1738 — Cleartext...

CVE-2024-56428

CVE-2024-56428 بيانات الاعتماد النصية الصريحة في قاعدة البيانات المحلية لـ iLabClient قراءة التكوين بما في ذلك كلمة المرور يُستخدم iLabClient لتنزيل النتائج من خادم المختبر. يتم تخزين بيانات التكوين محليًا في مثيل Apache Derby iLabClient. يتم تخزين كلمة المرور كنص عادي. لقراءة ذلك، يجب أولاً إنشا...

WordPress Download Manager - File Password Exposure

The WordPress Download Manager plugin contains a vulnerability that allows attackers to obtain passwords for password-protected downloads by sending a specially crafted request to the validate-password API endpoint. id: CVE-2023-6421 info: name: WordPress Download Manager - File Password Exposure...

CVE-2021-38489

CVE-2021-38489 affects the HddPasswordPei driver in Insyde InsydeH2O 5.x firmware, as shipped in Siemens SIMATIC products. The root cause is that the HDD password is stored in plaintext within a UEFI variable, exposing it to attackers with local, high-privilege access. The vulnerability carries a...

CVE-2021-43613

A vulnerability in the SysPasswordDxe driver of Insyde InsydeH2O 5.x exposes user and administrator password hashes in runtime UEFI variables, enabling privilege escalation . The affected firmware is also used in Siemens SIMATIC industrial products. The CVSS 3.1 score is 6.5 (Medium) with a local...

CVE-2025-63579

CVE-2025-63579 Accès non autorisé à tous les noms d'utilisateur et mots de passe saisis dans la fonctionnalité Carnet d'adresses présente sur les imprimantes Kyocera Command Center RX. Description L'utilisation non autorisée des imprimantes Kyocera permet d'exporter toutes les informations stocké...

EUVD-2026-69866

The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux root@kitploit: a...

xpl-ModernWMS-CVE-2024-57698

Admin MD5 Password Hash Disclosure - ModernWMS v1.0 - CVE-2024-57698 An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive...

CVE-2019-6693

CVE-2019-6693 Have you changed your default FortiGate encryption keys? Run this script and find out! You can provide the entire configuration file dump or individual encrypted values. If the decrypted values aren't complete nonsense or produce a word, then it is likely the encryption key is left ...

keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // متاح للجميع // الاختراق التطبيقي KeySweeper KeySweeper هو جهاز خفي يعتمد على أردوينو، متنكّر بهيئة شاحن حائطي USB يعمل بكفاءة، يلتقط لاسلكيًا وسلبيًا جميع ضغطات المفاتيح من أي لوحة مفاتيح لاسلكية من مايكروسوفت في المحيط، ويفك تشفيرها ويسجلها ويبلغ عنها عبر GSM...

CVE-2026-55857 MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

CVE-2026-55857 MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

CVE-2026-55854

MariaDB Connector/Node.js can disclose an account password in cleartext when PAM dialog authentication is negotiated over an insecure transport. The root cause is in lib/cmd/handshake/auth/pam-password-auth.js and lib/cmd/handshake/authentication.js, where SendPamAuthPacketFactory lacked the secu...

CVE-2026-81705

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

CVE-2026-81684 openssl_encrypt before 1.4.9 Information Disclosure via Command Line

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

EUVD-2026-66847

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

Linux Distros Unpatched Vulnerability : CVE-2026-80158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind...