Leaks of username and password leads to CVE-2018-18862 exploitation