CVE-2025-26199

🛡️ CVE-2025-26199 — Transmisión Insegura de Contraseñas en Texto Claro en CloudClassroom-PHP-Project v1.0 📄 Descripción CloudClassroom-PHP-Project v1.0 es vulnerable a la transmisión insegura de credenciales de usuario. Durante el proceso de autenticación, las contraseñas se envían a través de HTT...

masscan

MASSCAN: Escáner de puertos IP masivo Este es un escáner de puertos a escala de Internet. Puede escanear todo Internet en menos de 5 minutos, transmitiendo 10 millones de paquetes por segundo, desde una sola máquina. Su uso parámetros, salida es similar a nmap, el escáner de puertos más famoso. E...

Fujitsu IP Series - Hardcoded Credentials

Fujitsu Real-time Video Transmission Gear “IP series” use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. The credentials cannot be changed by the end-user and provide administrative...

etherify

Etherify - riportare l'etere nell'ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 Intervento alla RC3 Conference: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 e 2: https://lipkowski.com/etherify con RPI 4 Etherify 3: https://lipkowski.com/etherify3/ senza cavo etherne...

wave-share

wave-share Una prova di concetto per la segnalazione WebRTC tramite suono. Funziona con tutti i dispositivi che hanno microfono + altoparlanti. Viene eseguito nel browser. I dispositivi vicini negoziano la connessione WebRTC scambiando i dati necessari del Session Description Protocol SDP tramite...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

EUVD-2026-68020

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

CVE-2026-55857

MariaDB Connector/J (versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9) is vulnerable to cleartext password transmission during PAM dialog authentication . The PAM handler SendPamAuthPacketFactory (referred to as dialog by the server) does not declare a secure-transport requirement and inherits t...

EUVD-2026-68010

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js can disclose an account password when PAM dialog authentication is negotiated over an insecure transport. In...

CVE-2013-4322_PoC

CVE-2013-4322PoC Un semplice script Python PoC che dimostra la vulnerabilità di trasmissione lenta delle richieste POST in modalità chunked...

CVE-2025-45620

Problemdetails Kameramodell PTC310UV2 mit Firmware-Version 0.1.0000.59. Die Schwachstelle befindet sich in der Weboberfläche, die für den Zugriff auf die Kamera verwendet wird. Die Schwachstelle wurde während eines Penetrationstests entdeckt, daher wurden bestimmte Informationen in den...

EUVD-2026-67279

A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed fro...

EUVD-2026-67280

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...

EUVD-2026-67290

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2026-81836

A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed fro...

CVE-2026-73809

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...

CVE-2026-69658

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

PT-2026-83373

Name of the Vulnerable Software and Affected Versions MariaDB Connector/J versions prior to 2.7.14 MariaDB Connector/J versions prior to 3.3.5 MariaDB Connector/J versions prior to 3.4.3 MariaDB Connector/J versions prior to 3.5.9 Description When using PAM dialog authentication, the connector ca...

CVE-2025-50110

CVE-2025-50110 Trasmissione in chiaro di informazioni sensibili nell'applicazione Android EagleEyes Lite 1. Panoramica Nome : EagleEyesLite Versione : 2.0.0 Fornitore : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query...

CVE-2026-69658 Ebyte NE2-D11 Cleartext Transmission of Sensitive Information

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...