32418 matches found
CVE-2026-105241 Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch
Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...
EUVD-2026-93866
Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...
CVE-2026-105239 Apache log4net: NUL character truncates EventLogAppender records
Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record at that point, so everything the layout rendered after it, including exception text and trailing fields, was silently...
CVE-2026-105239 Apache log4net: NUL character truncates EventLogAppender records
Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record at that point, so everything the layout rendered after it, including exception text and trailing fields, was silently...
key-transparency-auditor
key-transparency-auditor 基于 密钥透明度 规范，为 Signal 的密钥透明度服务实现的一个第三方审计器参考实现。 概述 该服务使用 Java 编写，基于 Micronaut 框架。要构建并运行单元测试，请运行以下命令： ./mvnw clean test 在根目录中执行。 主类是...
CVE-2024-21111
CVE-2024-21111 Oracle VirtualBox 7.0.16 より前のバージョンは、シンボリックリンクの追従によるローカル権限昇格の脆弱性の影響を受け、任意のファイル削除および任意のファイル移動につながります。 VirtualBox は、C:\ProgramData\VirtualBox（すべてのユーザーが書き込み可能）内のログファイルを NT AUTHORITY\SYSTEM として移動し、序数（連番）でバックアップしようとしますが、最大 10 件のログまでです。また VirtualBox は、11 件目のログを NT AUTHORITY\SYSTEM...
CVE-2025-60503
CVE-2025-60503 — UltimatePOS UltimateFosters v4.8 における格納型クロスサイトスクリプティング XSS 公開日: 2025-10-30 CVE ID: CVE-2025-60503 RESERVED 研究者: Vivien Lebas ベンダー: UltimateFosters 製品: UltimatePOS 影響を受けるバージョン: 4.8 脆弱性の種類: 格納型クロスサイトスクリプティング XSS 深刻度: 高 概要 UltimatePOS 管理パネル v4.8 には 格納型XSS の脆弱性が存在します。 Purchases モジュール...
CVE-2026-61411
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-63689
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-22356
CVE-2026-22356: Jetpack CRM パストラバーサル脆弱性およびRCE 警告: このツールは認可されたテスト環境でのみ使用してください。違法な使用については、すべてユーザーの責任となります。 📥 要件 pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd "id" + Target is VULNERABLE to LFI! Attempting Log Poisoning for RCE... Searching for accessible log...
CVE-2026-63689
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-63689
Dell Container Storage Modules (CSM) , versions prior to 1.18.0, are vulnerable to an Insertion of Sensitive Information into Log File (CWE-532). A low privileged attacker with remote access could exploit this to cause Information disclosure . While some reports describe related vulnerabilities i...
CVE-2026-63689
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
EUVD-2026-93462
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-61411
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-61411
Dell Container Storage Modules versions prior to 1.18.0 are vulnerable to an Insertion of Sensitive Information into Log File vulnerability (CWE-532). A low-privileged attacker with remote access could exploit this to cause Information disclosure . The affected software is used to integrate Dell ...
CVE-2026-61411
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
EUVD-2026-93460
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2021-44228
🚨 CVE-2021-44228 — 「Log4Shell」 Apache Log4j 2 における深刻なリモートコード実行の脆弱性であり、広く Log4Shell として知られています。 📖 目次 概要 技術的詳細 深刻度とCVSS 影響を受けるバージョン 悪用と影響 実際の影響 検出 対策と修正 まとめ 🔎 概要 CVE-2021-44228 は、2021年12月に発見された Apache Log4j 2.x （2.15.0 未満）における深刻なRCE脆弱性です。 この脆弱性により、認証されていないリモート攻撃者が、Log4j...
CVE-2025-27591
Below - ローカル権限昇格 CVE-2025-27591 Below .log を /etc/passwd などの root 所有の任意のファイルへのシンボリックリンクにできます。 below snapshot が sudo で実行されると、ログファイルがシンボリックリンクであっても、強制的にモード 0666 を設定して書き込みを行います。 これにより、パスワードなしの root 権限ユーザーを注入でき、完全な root シェルアクセスが可能になります。 使い方 git clone https://github.com/rvizx/CVE-2025-27591 cd...