CVE-2024-56428

CVE-2024-56428 Cleartext credentials in local database of the iLabClient Read out the configuration incl. password The iLabClient is used to download the results from the laboratory server. The configuration data are stored locally in the Apache Derby instance iLabClient. The password is stored i...

keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL TO ALL // APPLIED HACKING KeySweeper KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back over GSM all keystrokes from any Microsoft wireless...

WordPress Download Manager - File Password Exposure

The WordPress Download Manager plugin contains a vulnerability that allows attackers to obtain passwords for password-protected downloads by sending a specially crafted request to the validate-password API endpoint. id: CVE-2023-6421 info: name: WordPress Download Manager - File Password Exposure...

CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Improper Access Control Description In version 6.03 of BoltWire CMS , it is possible to exploit an “Improper Access Control” vulnerability, through the index.php?p=member.admin&action=data parameter, allowing an attacker to view any member's password, including t...

CVE-2025-1738

CVE-2025-1738 - Trivision Camera NC227WF PoC 📋 Overview Following responsible disclosure, two official CVEs were assigned. CVE| CVSS v3.1| Score| CWE| Type ---|---|---|---|--- CVE-2025-1738| AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| 6.2| CWE-598| Cleartext Password Exposure 🔍 CVE-2025-1738 — Cleartext...

CVE-2019-6693

CVE-2019-6693 Have you changed your default FortiGate encryption keys? Run this script and find out! You can provide the entire configuration file dump or individual encrypted values. If the decrypted values aren't complete nonsense or produce a word, then it is likely the encryption key is left ...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux root@kitploit: a...

xpl-ModernWMS-CVE-2024-57698

Admin MD5 Password Hash Disclosure - ModernWMS v1.0 - CVE-2024-57698 An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive...

EUVD-2026-87104

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

CVE-2025-63579

CVE-2025-63579 Unauthorized access to all user names and passwords entered in the Address Book feature found in Kyocera Command Center RX printers. Description Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that...

CVE-2026-67221 RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls amqpuri:removecredentials before storing its connection URI, but the AMQP 1.0 shovel stores the raw URI including the password. The stored URI is visible via GET...

CVE-2023-39144

CVE-2023-39144 Background I discovered this vulnerability in May of 2023. Element55 produces software for law offices to track time. This software pulls information from various locations, such as Exchange, SQL, and Shoretel. Timeline May 24, 2023 - Reported vulnerability to Element 55 May 25, 20...

CVE-2026-92768

CVE-2026-92768 affects cockpit-machines , a component of the Cockpit web-based server management tool. The root cause is that password values are passed directly as command-line arguments during VM creation or installation, making them visible to other local users on systems where process argumen...

EUVD-2026-83262

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

EUVD-2026-65219

Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashedpassword and 2FA secrets via offsetGet...

CVE-2026-20072

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...

CVE-2026-20072 ISE information disclosure

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...

EUVD-2026-81160

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...

CVE-2026-20072

CVE-2026-20072 is an information disclosure vulnerability in the web-based management interface of Cisco ISE . Certain files in the interface lack proper authorization enforcement, allowing an authenticated remote attacker with administrative privileges and management rights over network users to...

CVE-2026-20072 ISE information disclosure

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...