PasswordFilter

PasswordFilter 2 ways of Password Filter DLL to record the plaintext password More detials: https://3gstudent.github.io/Password-Filter-DLL%E5%9C%A8%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E4%B8%AD%E7%9A%84%E5%BA%94%E7%94%A8...

Mikrotik-router-hack

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha terminado y ya no recibirá soporte ni...

tsh-sctp

Tiny SHell - Una puerta trasera UNIX de código abierto Antes de compilar Tiny SHell 1. En primer lugar, debes configurar tu clave secreta, que se encuentra en tsh.h; la clave puede tener cualquier longitud usa al menos 12 caracteres para una mejor seguridad. 2. Se recomienda cambiar SERVERPORT, e...

CVE-2025-48708

CVE-2025-48708 Description A vulnerability in Artifex Ghostscript before version 10.05.1 causes the plaintext password used to protect a PDF file to be embedded in the output. The issue is due to a lack of argument sanitization in gslibctxstashsanitizedarg base/gslibctx.c, particularly when...

CVE-2018-14847

CVE-2018-14847 Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad se corrigió hace tiempo, por lo que este proyecto ha finalizado y ya no recibirá soporte ni...

AD-description-password-finder

Buscador de contraseñas en la descripción de AD El propósito de esta herramienta es comprobar si hay contraseñas almacenadas en texto claro en la descripción de las cuentas de Active Directory. Los requisitos son: tener una copia del ntds.dit y del hive SYSTEM Si no tiene Python, puede usar la...

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232

Digisol-DG--GR1321-的-明文密码存储--CVE-2024-4232...

CVE-2025-26199

🛡️ CVE-2025-26199 — Transmisión Insegura de Contraseñas en Texto Claro en CloudClassroom-PHP-Project v1.0 📄 Descripción CloudClassroom-PHP-Project v1.0 es vulnerable a la transmisión insegura de credenciales de usuario. Durante el proceso de autenticación, las contraseñas se envían a través de HTT...

CVE-2023-33730

CVE-2023-33730 — Escalada de Privilegios en eScan Management Console Severidad: Crítica ID CVE: CVE-2023-33730 Divulgado: 30 de mayo de 2023 Autor: Sahil Ojha Tabla de Contenidos Overview Vulnerability Details Impact Technical Analysis Proof of Concept Remediation References Disclaimer Descripció...

EUVD-2026-85847

PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...

CVE-2026-4638

PRTG Network Monitor versions before 26.2.120.1449 are vulnerable to plaintext password disclosure. The issue exists in a demo EXE/Script sensor that utilizes cscript.exe to multiply two integer parameters. If a non-numeric value is provided, cscript.exe generates a 'Type mismatch' runtime error ...

automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via Schedule/WorkflowJobTemplateNode survey min/max validation error message

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via Schedule/WorkflowJobTemplateNode survey min/max validation error message

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

CVE-2026-67221 RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls amqpuri:removecredentials before storing its connection URI, but the AMQP 1.0 shovel stores the raw URI including the password. The stored URI is visible via GET...

EUVD-2026-85561

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

CVE-2026-84499

A flaw in Red Hat Ansible Automation Platform's automation-controller allows a user with the JobTemplate Admin role to recover encrypted passwords in plaintext. When a schedule or workflow job template node is revalidated against a tightened survey specification, the controller decrypts the store...

CVE-2026-84499 Automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via schedule/workflowjobtemplatenode survey min/max validation error message

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

CVE-2026-84499

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

CVE-2026-84499: Generation of Error Message Containing Sensitive Information

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification,...

CVE-2026-85725

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verifypassword in lightrag/api/passwords.py compares plaintext AUTHACCOUNTS password values with Python's == operator. The comparison can return after the first mismatching byte, creating response-time differences...