Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 Vulnerability Description: During the security assessment of the Router firmware, it was observed that router login credentials of both web portal and Wi-Fi access point are stored in plain text in SPI flash memoey...

CVE-2026-5076

CVE-2026-5076 - ARMember パスワードリセットの脆弱性 脆弱性情報 項目| 詳細 ---|--- CVE ID| CVE-2026-5076 プラグイン| ARMember – Membership Plugin & Content Restriction 影響を受けるバージョン| Premium = 7.3.1 修正バージョン| 7.3.2 CVSSスコア| 9.8 Critical CWE| CWE-640: Weak Password Recovery 種別| Insecure Password Reset Mechanism → Plaintext Key...

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 脆弱性の説明: ルーターファームウェアのセキュリティ評価中に、ルーターに接続されているデバイス（携帯電話、ノートパソコン、タブレットなど）に関する機密情報が平文で保存されており、攻撃者がそれを悪用する可能性があることが確認されました。 製品ベンダー: Hathway 影響を受ける製品: CM5100-511 影響を受けるバージョン: 4.1.1.24 脆弱性スコア V3.1: 5.2 Medium...

ctf

CTF Related stuff Table of Contents The challs are linked in the table below. Description| Event/Game| Solution ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| An exe with a "login" functionality with the password in plain text in the memory. Blackbox| Level 2| An exe with setuid for...

CVE-2022-42176

PCSecure V5.0.8.xw - 設定ファイル内のハードコードされた認証情報により管理者パネルへのアクセスが可能になる 概要 ベンダー: PCTechSoft SAS 製品: PCSecure 影響を受けるバージョン: 5.0.8.xw コードネーム: PapiQuieroPollo00 脆弱性 種別: ハードコードされた認証情報の使用 CWE-798 CVSSv3.1 ベクター: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 基本値: 7.8 高 エクスプロイトの利用可能性: なし CVE ID:...

CVE-2026-54433

CVE-2026-54433: Roundcube プレーンテキストメールの格納型XSS このリポジトリには、CVE-2026-54433 — Roundcube のプレーンテキストメールレンダラーにおける格納型クロスサイトスクリプティング脆弱性 — に対する設定可能な Python 概念実証が含まれています。認証されていない送信者は、細工された text/plain メッセージを配信できます。認証済みの Roundcube ユーザーがそのメッセージを開くかプレビューすると、攻撃者制御の JavaScript が Roundcube オリジン内で実行されます。 この PoC は、Cook...

smb

root@kitploit: ███████╗███╗ ███╗██████╗ ███║ ██╔════╝████╗ ████║██╔══██╗ ║██║ ███████╗██╔████╔██║██████╔╝ ██║ ██ ║██║ ╚════██║██║╚██╔╝██║██╔══██╗ ╚██╗ ██ ╔╝██║ ███████║██║ ╚═╝ ██║██████╔╝ ╚████╔╝ ██║ ╚══════╝╚═╝ ╚═╝╚═════╝ ╚═══╝ ╚═╝ SMB は、マシン間でファイル、プリンタ、その他のリソースを共有できるネットワークプロトコルです。 SMB v1（Server...

[SECURITY] Fedora 43 Update: dokuwiki-20250514b-6.fc43

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

[SECURITY] Fedora 44 Update: dokuwiki-20250514b-8.fc44

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

WinboxPoC

WinboxExploit 이것은 평문 비밀번호의 임의 파일 읽기를 가능하게 하는 중요한 WinBox 취약점CVE-2018-14847의 개념 증명입니다. 해당 취약점은 오래전에 수정되었으므로 이 프로젝트는 종료되었으며 더 이상 지원되거나 업데이트되지 않습니다. 대신 포크하여 직접 업데이트할 수 있습니다. 블로그 포스트 https://n0p.me/winbox-bug-dissection/ 요구 사항 Python 3+ 이 스크립트는 Python 2.x 이하에서는 실행되지 않습니다. 사용 방법 이 스크립트는 명령줄에서 간단한 인수와 함...

CVE-2025-63820

CVE-2025-63820 Submitter: Nicola Giuffrida Information Vendor: TOTOLINK Vendor's website: TOTOLINK Model: A720R Firmware version: V4.1.5cu.630B20250509 Firmware download address: TOTOLINK Vulnerability details When logging into the control panel, the username and password are sent in plain-text:...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in several Ansible modules, where parameters containing credentials, such as “secrets,” were logged in plain text on managed nodes, and were also made visible on the controller node when run in verbose mode. These parameters were not protected by the “nolog” feature. An...

solutions

Exploitmatic solutions !License: Apache 2.0https://img.sh...

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2026-54433: Roundcube plain-text email stored XSS !Explo...

CVE-2026-18097

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files...

github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API

A flaw was found in Prometheus, an open-source monitoring system. The clientsecret field within the Azure Active Directory AD remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access t...

Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)

Summary IBM® Db2® could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Vulnerability Details CVEID:CVE-2026-18097 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain...

Millions of cars could be tracked and unlocked by a hidden security flaw

A car alarm vendor's coding mistake has left millions of vehicles vulnerable to theft and location tracking. Thanks to the way dealers sell car alarms, many affected drivers don't even know they have one installed. The device is the KARR Security System, a Bluetooth-enabled aftermarket alarm buil...

CVE-2026-44187

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...