CVE-2023-41610

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...

PT-2024-37273 · Eliz · Eliz Software Panel

Name of the Vulnerable Software and Affected Versions: Eliz Software Panel versions prior to 2.3.24 Description: The issue is related to the plaintext storage of a password in Eliz Software Panel, allowing the use of known domain credentials. Recommendations: For versions prior to 2.3.24, update ...

Victure PC420 安全漏洞

Victure PC420 is a web-based smart camera from Victure. A security vulnerability exists in the Victure PC420 version 1.1.39, which stems from the presence of a hard-coded root password stored in plaintext...

Eliz Panel 安全漏洞

Eliz Panel is a control panel from Eliz Corporation. A security vulnerability exists in Eliz Panel versions prior to 2.3.24, which stems from a password storage in plaintext vulnerability...

Netgear PNPX_GetShareFolderList Authentication Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/credentialcollection' class MetasploitModule 'Netgear PNPXGetShareFolderList Authentication Bypass', 'Description' = %q This module targets...

CVE-2024-36460

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text...

CVE-2024-6118

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file...

PT-2024-37395 · Hamastar · Hamastar Meetinghub Paperless Meetings

Name of the Vulnerable Software and Affected Versions: Hamastar MeetingHub Paperless Meetings version 2021 Description: A Plaintext Storage of a Password issue in the ebooknote function allows remote attackers to obtain other users' credentials and gain access to the product via an XML file...

DEBIAN-CVE-2024-23091

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values...

CVE-2024-41687

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow...

CVE-2024-41687

The connected sources confirm a vulnerability in the SyroTech SY-GPON-1110-WDONT Router where passwords are transmitted in plain text, enabling a remote attacker to gain unauthorized access by eavesdropping on HTTP sessions. The issue stems from cleartext transmission of sensitive information ove...

Linksys Velop Pro 6E Security Vulnerability

The Linksys Velop Pro 6E is a wireless router from Linksys. A security vulnerability exists in Linksys Velop Pro 6E versions 1.0.8 MX62001.0.8.215731 and 7 1.0.10.215314, which originates from a plaintext Wi-Fi password being sent over the public Internet during an application-based installation...

Faronics WINSelect Security Breach

Faronics WINSelect is an application from Faronics, Inc. It is used to customize the usage configuration of Windows computers. A security vulnerability previously existed in Faronics WINSelect version 8.30.xx.903, which arose from a decrypted configuration file containing a plaintext password use...

Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs

Overview MFPs multifunction printers provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' CWE-776 - CVE-2024-27141, CVE-2024-27142 Execution with...

RHEL 7 : gnome-keyring (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password...

RHEL 7 : 389-ds-base (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default CVE-2018-10871 Note tha...

Teledyne FLIR M300 安全漏洞

The Teledyne FLIR M300 is a camera surveillance device from Teledyne FLIR, USA. A security vulnerability exists in Teledyne FLIR M300 version 2.00-19, which originates from a user account password that is locally encrypted and can be decrypted into plaintext using a utility program...

CVE-2024-28327

Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings...

CVE-2024-28327

CVE-2024-28327 affects Asus RT-N12+ B1 router. The root cause is that the device stores user passwords in plaintext, enabling local attackers to obtain unauthorized access and modify router settings. Documented impact is high (local access, confidentiality/integrity/availability at risk). Publicl...

Mobileiron Sentry 安全漏洞

MobileIron Sentry is a smart gateway product from MobileIron, Inc. A security vulnerability exists in Mobileiron Sentry versions prior to 24.4.1, which originates from the disclosure of a superuser's plaintext password in logs...