PasswordFilter

PasswordFilter 2 formas de DLL de filtro de contraseñas para registrar la contraseña en texto plano Más detalles: https://3gstudent.github.io/Password-Filter-DLL%E5%9C%A8%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E4%B8%AD%E7%9A%84%E5%BA%94%E7%94%A8...

Mikrotik-router-hack

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha terminado y ya no recibirá soporte ni...

tsh-sctp

Tiny SHell - Una puerta trasera UNIX de código abierto Antes de compilar Tiny SHell 1. En primer lugar, debes configurar tu clave secreta, que se encuentra en tsh.h; la clave puede tener cualquier longitud usa al menos 12 caracteres para una mejor seguridad. 2. Se recomienda cambiar SERVERPORT, e...

Rocky Linux 8 [CIQ] Security Update: pam / pam-debuginfo / pam-debugsource / pam-devel (crlsa-2026_56131)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202656131 advisory. linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 Tenable has extracted the preceding description block directly fro...

Rocky Linux 9 [CIQ] Security Update: pam / pam-debuginfo / pam-debugsource / pam-devel / pam-docs (crlsa-2026_64815)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202664815 advisory. linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 Tenable has extracted the preceding description block directly fro...

Updated pam packages fix a security vulnerability

The updated packages fix a security vulnerability: Linux-PAM pamuserdb Observable Timing Discrepancy in Plaintext Password Comparison. CVE-2026-54411...

MGASA-2026-0461 Updated pam packages fix a security vulnerability

The updated packages fix a security vulnerability: Linux-PAM pamuserdb Observable Timing Discrepancy in Plaintext Password Comparison. CVE-2026-54411...

CVE-2025-48708

CVE-2025-48708 Descripción Una vulnerabilidad en Artifex Ghostscript anterior a la versión 10.05.1 provoca que la contraseña en texto plano utilizada para proteger un archivo PDF se incruste en la salida. El problema se debe a la falta de sanitización de argumentos en gslibctxstashsanitizedarg...

CVE-2018-14847

CVE-2018-14847 Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad se corrigió hace tiempo, por lo que este proyecto ha finalizado y ya no recibirá soporte ni...

AD-description-password-finder

Buscador de contraseñas en la descripción de AD El propósito de esta herramienta es comprobar si hay contraseñas almacenadas en texto claro en la descripción de las cuentas de Active Directory. Los requisitos son: tener una copia del ntds.dit y del hive SYSTEM Si no tiene Python, puede usar la...

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232...

CVE-2025-26199

🛡️ CVE-2025-26199 — Insecure Password Transmission via Cleartext in CloudClassroom-PHP-Project v1.0 📄 Description CloudClassroom-PHP-Project v1.0 is vulnerable to insecure transmission of user credentials. During the authentication process, passwords are submitted over unencrypted HTTP rather than...

CVE-2023-33730

CVE-2023-33730 — Escalada de Privilegios en eScan Management Console Severidad: Crítica ID CVE: CVE-2023-33730 Divulgado: 30 de mayo de 2023 Autor: Sahil Ojha Tabla de Contenidos Overview Vulnerability Details Impact Technical Analysis Proof of Concept Remediation References Disclaimer Descripció...

CVE-2026-4638 Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...

CVE-2026-4638 Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...

EUVD-2026-85847

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...

CVE-2026-4638

PRTG Network Monitor versions before 26.2.120.1449 are vulnerable to plaintext password disclosure. The issue exists in a demo EXE/Script sensor that utilizes cscript.exe to multiply two integer parameters. If a non-numeric value is provided, cscript.exe generates a 'Type mismatch' runtime error ...

automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via Schedule/WorkflowJobTemplateNode survey min/max validation error message

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via Schedule/WorkflowJobTemplateNode survey min/max validation error message

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

CVE-2026-67221 RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls amqpuri:removecredentials before storing its connection URI, but the AMQP 1.0 shovel stores the raw URI including the password. The stored URI is visible via GET...