CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...

IBM Host Access Transformation Services 安全漏洞

IBM Host Access Transformation Services is a software solution from International Business Machines IBM. IBM Host Access Transformation Services suffers from an insufficiently protected credentials vulnerability that arises from storing user credentials in plaintext, which can be exploited by an...

Newland Nquire 1000 Security Vulnerability

The Newland Nquire 1000 is an interactive self-service kiosk from Newland. A security vulnerability exists in the Newland Nquire 1000 Interactive Kiosk NQ1000-IIGV1.00.011 version, which originates from a vulnerability that could allow a remote attacker to gain access to sensitive information via...

WyreStorm Apollo VX20 Security Vulnerability

Wyrestorm Apollo VX20 is an advanced conferencing video appliance from Wyrestorm. A security vulnerability exists in the WyreStorm Apollo VX20 prior to version 1.3.58, which stems from plaintext credentials that allow a remote attacker to access the SoftAP router via a simple HTTP GET request...

Metasploit Weekly Wrap-Up 02/23/2024

LDAP Capture module Metasploit now has an LDAP capture module thanks to the work of JustAnda7. This work was completed as part of the Google Summer of Code program. When the module runs it will by default require privileges to listen on port 389. The module implements a default implementation for...

PT-2024-29508 · Syrotech · Sy-Gpon-1110-Wdont Router

Name of the Vulnerable Software and Affected Versions: SyroTech SY-GPON-1110-WDONT Router affected versions not specified Description: This issue is related to the lack of encryption in storing usernames and passwords within the router's firmware/database. An attacker with physical access could...

CVE-2024-21869

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them...

CVE-2024-21869

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them...

Design/Logic Flaw

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them...

CVE-2024-21869

Affected product: Rapid SCADA (Rapid Software LLC). Vulnerable component: plaintext storage of credentials in Rapid SCADA versions prior to 5.8.4. Root cause: credentials stored in plaintext in various locations, enabling disclosure with local access. Impact: confidentiality of credentials can be...

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

CVE-2023-51741

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web...

CVE-2023-51740

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web...

Authentication flaw

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web...

CVE-2023-51741

CVE-2023-51741 affects Skyworth Router CM5100, version 4.1.1.24. The root cause is the transmission of authentication credentials in plaintext over the network, allowing a remote attacker to eavesdrop network traffic and extract username and password from the router’s web interface (Password Rese...

CVE-2024-0556

CVE-2024-0556 describes a weakness in the WIC200 system (version 1.1) where weak cryptography for passwords can allow a remote attacker to intercept traffic and retrieve credentials from another user. The attack enables decoding credentials in Base64, exposing plaintext credentials. The vulnerabi...

Rapid Software Rapid SCADA Security Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA 5.8.4 and earlier versions that stems from storing plaintext credentials in a different location, which allows an attacker with local acce...

Genie Aladdin Connect Mobile Application Security Vulnerability

Genie Aladdin Connect Mobile Application is a garage door opener control software from Genie. A security vulnerability exists in Genie Aladdin Connect Mobile Application 5.65 Build 2075 and prior versions, which stems from the fact that a user's product account authentication data is stored in...

Sesami Cash Point & Transport Optimizer Security Vulnerability

Sesami Cash Point & Transport Optimizer is a solution from Sesami Corporation. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 that stems from the presence of an unknown issue. Allows a remote attacker to obtain sensitive information by transmitting...