SoftPerfect Bandwidth Manager - Auth Bypass Detection

Detects SoftPerfect Bandwidth Manager auth bypass via Basic AAAA and XML getoptions returning . !/usr/bin/env python3 -- coding: utf-8 -- """SoftPerfect Bandwidth Manager Basic Auth bypass / password disclosure.""" import re from kittysploit import from lib.protocols.http.httpclient import...

EUVD-2020-5770

Malware in sbrugna...

EUVD-2020-5769

Malware in sbrugna...

EUVD-2022-50909

Malicious code in bioql PyPI...

EUVD-2025-22537

Malicious code in bioql PyPI...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 is vulnerable to plaintext storage of credentials . The software stores all user credentials without encryption, which can lead to unauthorized access to sensitive information if the local data is compromised. There is currently no information a...

CVE-2025-45702: Plaintext Storage of a Password

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

PT-2025-30687

Name of the Vulnerable Software and Affected Versions SoftPerfect Pty Ltd Connection Quality Monitor version 1.1 Description SoftPerfect Pty Ltd Connection Quality Monitor stores all credentials in plaintext. Recommendations At the moment, there is no information about a newer version that contai...

SoftPerfect Connection Quality Monitor security vulnerability

SoftPerfect Connection Quality Monitor is a software from SoftPerfect Australia for monitoring the quality of Internet connections. A security vulnerability exists in SoftPerfect Connection Quality Monitor v1.1, which stems from credentials being stored in plaintext...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

CVE-2025-45702

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext...

CVE-2022-48199

SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that abuses the Notifications function. The Notifications function allows for arbitrary binary execution and can be modified by any user. The...

CVE-2020-13523

An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...

CVE-2020-13522

An exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet IRP can allow an unprivileged user to delete any file on the filesystem. An attacker can send a malicious IRP to trigger this vulnerability...

CVE-2022-48199

SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that abuses the Notifications function. The Notifications function allows for arbitrary binary execution and can be modified by any user. The...

Design/Logic Flaw

SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that abuses the Notifications function. The Notifications function allows for arbitrary binary execution and can be modified by any user. The...

SoftPerfect NetWorx security vulnerability

SoftPerfect NetWorx is a simple and versatile tool from SoftPerfect that helps you monitor Internet connections. A security vulnerability exists in SoftPerfect NetWorx version 7.1.1, which stems from a vulnerability that allows an attacker to execute a malicious binary with potentially elevated...