CVE-2023-4281

CVE ID: CVE-2023-4281 Тип уязвимости: Подмена IP-адреса Описание: Плагин Activity Log извлекает IP-адреса клиентов из потенциально ненадёжных заголовков, что позволяет злоумышленнику манипулировать их значениями. Это может быть использовано для сокрытия источника вредоносного трафика. Шаги для...

EUVD-2026-72672

Snowflake drivers writes sensitive information to logs...

CVE-2026-59310

CVE-2026-59310 More echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2024-1302---Badgermeter-moni-tool-Sensitive-information-exposure

CVE-2024-1302 --- Badgermeter moni tool - 민감한 정보 노출 https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1302: 7.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | CWE-200. 소프트웨어 링크 : https://www.s-can.at/en/product/monitool/ 버전 : 4.6.3...

CVE-2025-27591

CVE-2025-27591 설명 기본적으로 below 도구는 로그 파일에 대해 모든 수정을 허용하므로 루트 권한으로의 권한 상승이 발생합니다. 세부사항. below가 생성하는 로그 파일은 전역 쓰기 가능하여 모든 사용자가 수정하거나 교체할 수 있습니다. 공격자는 로그 파일에서 /etc/passwd로의 심볼릭 링크를 생성하여 이를 악용할 수 있습니다. 공격자가 임의 입력을 기록하는 below의 오류를 유발하고, 그 입력을 유효한 /etc/passwd 항목 형식으로 조작하면 시스템에 새로운 루트 사용자를 주입할 수 있습니다...

CVE-2023-4800

Идентификатор CVE: CVE-2023-4800 Тип уязвимости: Раскрытие конфиденциальных данных Описание: Плагин DoLogin Security для WordPress уязвим к несанкционированному доступу к данным из-за отсутствия проверки прав на виджете панели управления в версиях до 3.7 включительно. Это позволяет...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-76905 DESCRIPTION: kin-opena...

CVE-2025-27591

CVE-2025-27591 - below를 통한 권한 상승 이 저장소는 Linux 모니터링 도구 Below 의 권한 상승 취약점인 CVE-2025-27591 에 대한 익스플로잇을 포함합니다. 🛠️ 취약점 세부 정보 CVE : CVE-2025-27591 CVSS 점수 : 7.8 높음 영향을 받는 도구 : below v0.9.0 이전 취약점 : Below는 루트 권한으로 모든 사용자가 쓰기 가능한 디렉터리와 로그 파일/var/log/below/errorroot.log을 생성하므로, 권한이 없는 사용자가 심링크 공격을 수행할 수...

ExtendIntel

ExtendIntel 이 패키지는 Intel 패키지를 확장하여 더 많은 필드를 로그로 기록합니다. intel 파일에 다음 필드가 포함된 경우, 해당 데이터가 자동으로 intel.log에 추가됩니다. threatscore verdict verdictsource confidence desc lastseen firstseen url reports campaigns associated category killchainphases Intel 로그 이 패키지가 없으면 표준 intel.log의 내용은 다음과 같습니다:...

CVE-2023-51214

Предложенное описание Уязвимость межсайтового скриптования Cross Site Scripting в реализации журнала активности в вашем веб-приложении с использованием PHP v.1 позволяет удаленному злоумышленнику выполнить произвольный код через специально созданную нагрузку в URL. Тип уязвимости Межсайтовый...

CVE-2021-3129_exploit

CVE-2021-3129exploit Эксплойт для CVE-2021-3129 Настройка лаборатории: $ git clone https://github.com/laravel/laravel.git $ cd laravel $ git checkout e849812 $ composer install $ composer require facade/ignition==2.5.1 $ php artisan serve Использование: $ git clone...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: For the m68k architecture, the bus error is only forced if the PC is not in the exception table. The getkernelnofault function copies data in supervisor mode when forcing a task backtrace log through /proc/sysrqtrigger. This is...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: jfs: xattr: fixed buffer overflow for invalid xattr values. When the xattr size is not as expected, it is printed out to the kernel log in hexadecimal format as a form of debugging. However, when that xattr size is larger than...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fix for the iteration of extrefs during log replay. When calling inodeaddref and processing extrefs, if we jump to the next label, the value of victimname.len is undefined. This occurs because victimname.len wasn’t...

Astra Linux – Vulnerability in Apache2

Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move the cfglogverbose check before calling lpfcdmpdbg In an attempt to log message 0126 using LOGTRACEEVENT, the following hard lockup occurred, causing the system to hang. Call Trace: rawspinlockirqsave+0x32/0x40...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: A potential hang occurred in nilfsdetachlogwriter. Syzbot reported a potential hang during nilfsdetachlogwriter called when nilfs2 unmounts the file system. Analysis revealed that this issue arises because nilfssegctorsyn...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xfs: Fixed the allocation of the log recovery buffer for the legacy hsize parameter. The commit a70f9fe52daa “xfs: detects and handles invalid iclog size settings provided by mkfs“” added a fix for incorrect hsize values used ...

Astra Linux – Vulnerability in Thunderbird, Firefox

Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log did not account for external URLs. As a result, data could potentially be exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite loops when trying to resize the local TT. If the MTU of one of the attached interfaces becomes too small to transmit the local translation table, then it must be resized to fit within all fragments when...