* Add jovision credential disclosure exploit

* Fix username and password fields being mixed up

* Document jovision credentials disclosure