CVE-2022-42176

PCSecure V5.0.8.xw - 設定ファイル内のハードコードされた認証情報により管理者パネルへのアクセスが可能になる 概要 ベンダー: PCTechSoft SAS 製品: PCSecure 影響を受けるバージョン: 5.0.8.xw コードネーム: PapiQuieroPollo00 脆弱性 種別: ハードコードされた認証情報の使用 CWE-798 CVSSv3.1 ベクター: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 基本値: 7.8 高 エクスプロイトの利用可能性: なし CVE ID:...

ctf

CTF 관련 자료 목차 아래 표에 챌린지가 링크되어 있습니다. 설명| 이벤트/게임| 해법 ---|---|--- Smash The Stack| ---| --- 블랙박스| Level 1| 메모리에 평문 비밀번호가 있는 "로그인" 기능이 포함된 실행 파일. 블랙박스| Level 2| 루트 권한을 가진 setuid 실행 파일. return-to-libc 취약점...

CVE-2018-14847

WinboxExploit これは、クリティカルなWinBoxの脆弱性（CVE-2018-14847）の概念実証であり、プレーンテキストのパスワードの任意のファイル読み取りを可能にします。 ブログ記事 https://n0p.me/winbox-bug-dissection/ 必要条件 Python 3+ このスクリプトはPython 2.x以下では動作しません。 使用方法 このスクリプトは、コマンドラインでシンプルな引数を使って簡単に使用できます。 WinBox TCP/IP 脆弱性を悪用してパスワードを読み取ります。 python3 WinboxExploit.py PORT 例: ...

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 脆弱性の説明: ルーターのファームウェアのセキュリティ評価中に、WebポータルとWi-Fiアクセスポイントの両方のルーターのログイン資格情報がSPIフラッシュメモリに平文で保存されていることが観察されました。攻撃者はログイン資格情報を抽出でき、攻撃者に悪用される可能性があります。 製品のベンダー: Hathway 影響を受ける製品: CM5100-511 影響を受けるバージョン: 4.1.1.24 脆弱性スコア V3.1: 6.8...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 脆弱性の説明: ルーターファームウェアのセキュリティ評価中に、ルーターに接続されているデバイス（携帯電話、ノートパソコン、タブレットなど）に関する機密情報が平文で保存されており、攻撃者がそれを悪用する可能性があることが確認されました。 製品ベンダー: Hathway 影響を受ける製品: CM5100-511 影響を受けるバージョン: 4.1.1.24 脆弱性スコア V3.1: 5.2 Medium...

CVE-2026-54433

CVE-2026-54433: Roundcube プレーンテキストメールの格納型XSS このリポジトリには、CVE-2026-54433 — Roundcube のプレーンテキストメールレンダラーにおける格納型クロスサイトスクリプティング脆弱性 — に対する設定可能な Python 概念実証が含まれています。認証されていない送信者は、細工された text/plain メッセージを配信できます。認証済みの Roundcube ユーザーがそのメッセージを開くかプレビューすると、攻撃者制御の JavaScript が Roundcube オリジン内で実行されます。 この PoC は、Cook...

EUVD-2026-91830

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

smb

███████╗███╗ ███╗██████╗ ███║ ██╔════╝████╗ ████║██╔══██╗ ║██║ ███████╗██╔████╔██║██████╔╝ ██║ ██ ║██║ ╚════██║██║╚██╔╝██║██╔══██╗ ╚██╗ ██ ╔╝██║ ███████║██║ ╚═╝ ██║██████╔╝ ╚████╔╝ ██║ ╚══════╝╚═╝ ╚═╝╚═════╝ ╚═══╝ ╚═╝ SMB は、マシン間でファイル、プリンタ、その他のリソースを共有できるネットワークプロトコルです。 SMB v1（Server Message Block...

CVE-2026-94594

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

CVE-2026-94593

The Armatura One software contains a vulnerability where the backup and restore routine records the full database connection command in a host log file. This includes the superuser password in plain text . If an attacker gains access to the server operating system, they can use these disclosed cr...

CVE-2026-94594 Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

CVE-2026-94594

The Armatura One message broker is vulnerable to CWE-532 because it logs client connection credentials and associated passwords in plain text during normal operation. Any individual or entity with read access to the application logs, or to associated backups and support bundles containing these l...

WinboxPoC

WinboxExploit 이것은 평문 비밀번호의 임의 파일 읽기를 가능하게 하는 중요한 WinBox 취약점CVE-2018-14847의 개념 증명입니다. 해당 취약점은 오래전에 수정되었으므로 이 프로젝트는 종료되었으며 더 이상 지원되거나 업데이트되지 않습니다. 대신 포크하여 직접 업데이트할 수 있습니다. 블로그 포스트 https://n0p.me/winbox-bug-dissection/ 요구 사항 Python 3+ 이 스크립트는 Python 2.x 이하에서는 실행되지 않습니다. 사용 방법 이 스크립트는 명령줄에서 간단한 인수와 함...

PT-2026-104439

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The message broker logs client connection credentials and the associated password in plain text during normal operation. This allows any party with read access to the log files, backups,...

PT-2026-104438

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The backup and restore routine records the full database connection command in plain text within a log file on the host. This includes the superuser password, which can be used to gain...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.2:CLSA-2026:1773137907)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1773137907 advisory. - A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker...

CentOS Linux 8.5 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.5:CLSA-2026:1782979036)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1782979036 advisory. - A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker...

Rocky Linux 9.6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.6:CLSA-2026:1773312266)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773312266 advisory. - A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker...

CentOS Linux 6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-http-geoip / etc (CENTOS6:CLSA-2026:1789733488)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1789733488 advisory. - A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with ...

CVE-2025-63820

CVE-2025-63820 提出者: Nicola Giuffrida 情報 ベンダー: TOTOLINK ベンダーのウェブサイト: TOTOLINK モデル: A720R ファームウェアバージョン: V4.1.5cu.630B20250509 ファームウェアダウンロードアドレス: TOTOLINK 脆弱性の詳細 管理パネルにログインする際、ユーザー名とパスワードが平文で送信されます： POST /cgi-bin/cstecgi.cgi HTTP/1.1 Host: 192.168.0.1 Content-Length: 73 X-Requested-With:...