CVE-2026-105239 Apache log4net: NUL character truncates EventLogAppender records

Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record at that point, so everything the layout rendered after it, including exception text and trailing fields, was silently...

CVE-2026-105239 Apache log4net: NUL character truncates EventLogAppender records

Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record at that point, so everything the layout rendered after it, including exception text and trailing fields, was silently...

key-transparency-auditor

key-transparency-auditor Эталонная реализация стороннего аудитора для сервиса прозрачности ключей Signal, основанная на спецификации key transparency. Обзор Сервис написан на Java с использованием фреймворка Micronaut. Для сборки и запуска модульных тестов выполните ./mvnw clean test в корневом...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox до версии 7.0.16 уязвим для локального повышения привилегий через переход по символическим ссылкам, что приводит к произвольному удалению файлов и произвольному перемещению файлов. VirtualBox пытается перемещать файлы журналов как NT AUTHORITY\SYSTEM в...

CVE-2025-60503

CVE-2025-60503 — Межсайтовый скриптинг XSS с сохранением в UltimatePOS UltimateFosters v4.8 Дата публикации: 2025-10-30 CVE ID: CVE-2025-60503 ЗАРЕЗЕРВИРОВАН Исследователь: Vivien Lebas Вендор: UltimateFosters Продукт: UltimatePOS Затронутая версия: 4.8 Тип уязвимости: Межсайтовый скриптинг XSS с...

CVE-2026-63689

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-61411

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-22356

CVE-2026-22356: Уязвимость обхода пути и RCE в Jetpack CRM Предупреждение: Этот инструмент следует использовать только в авторизованных тестовых средах. Пользователь полностью несет ответственность за незаконное использование. 📥 Требования pip3 install requests urllib3 $ python3 exploit.py...

CVE-2026-63689

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-63689

Dell Container Storage Modules (CSM) , versions prior to 1.18.0, are vulnerable to an Insertion of Sensitive Information into Log File (CWE-532). A low privileged attacker with remote access could exploit this to cause Information disclosure . While some reports describe related vulnerabilities i...

CVE-2026-63689

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-93462

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-93460

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-61411

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-61411

Dell Container Storage Modules versions prior to 1.18.0 are vulnerable to an Insertion of Sensitive Information into Log File vulnerability (CWE-532). A low-privileged attacker with remote access could exploit this to cause Information disclosure . The affected software is used to integrate Dell ...

CVE-2026-61411

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2021-44228

🚨 CVE-2021-44228 — « Log4Shell » Une vulnérabilité critique d'exécution de code à distance dans Apache Log4j 2 , largement connue sous le nom de Log4Shell. 📖 Table des matières Aperçu Détails techniques Sévérité et CVSS Versions affectées Exploitation et impact Impact dans le monde réel Détection...

CVE-2025-27591

Below - локальное повышение привилегий CVE-2025-27591 Below .log на любой файл, принадлежащий root, например /etc/passwd. При выполнении below snapshot с sudo он принудительно устанавливает режим 0666 на файл лога и записывает в него — даже если это симлинк. Это позволяет внедрить пользователя с...

redact

redact 자유 형식 문자열에서 자격 증명과 유사한 내용을 제거하여 로그, 텔레메트리, 또는 기타 제3자 표면에 도달하기 전에 차단합니다 phpboyscout Go toolkit의 일부 — go-tool-base에서 추출한 작고 프레임워크가 없는 Go 모듈입니다. 문서: redact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact는 신뢰된 옵저버빌리티 표면과 신뢰되지 않은 옵저버빌리티 표면 — 텔레메트리 공급업체, 로그 수집기, 메트릭 저장소 — 사이의 경계에서 자유 형식 문자열에서...

KasperMeow

Kaspersky arkmon.sys KASLR 우회 - 커널 디버그 로그 유출 Kaspersky의 안티루트킷 모니터 드라이버arkmon.sys는 원시 커널 포인터를 포함하는 커널 디버그 로그를 저장합니다. 해당 로그는 XOR 0xCC + ROT13으로 "암호화"되어 있으며, 이는 쉽게 역산이 가능합니다. 모든 관리자 사용자는 IOCTL을 통해 이 로그를 읽고 복호화할 수 있어 KASLR을 완전히 무력화합니다. 이 글을 작성하는 시점에서, 해당 개념 증명은 완전히 패치된 Windows 11 25H2 및 최신 데이터베이스 업데이...