GPEWebDefender

GPEWebDefender Web攻撃モニター 。nginx / Caddy / アプリの隣に常駐し、アクセスログを追跡して、サイトが偵察や攻撃を受けているときに知らせます。このプロセスが停止しても、サイトの配信は継続します。 WazuhでもOSSECでもWAFでもありません。 コマンドは gpewebdefender です。ホスト、トークン、マップピン、GeoIP、ログパスはフラグまたはenvファイルで指定します — 特定の企業やサーバーに関する情報はコンパイルされていません。 これを一度も実行したことがない場合: このファイルを最初から最後まで一度読み、その後Method...

CVE-2014-0094

CVE-2014-0094 검증용. https://piyolog.hatenadiary.jp/entry/20140417/1397750197 를 참고하여, vulhub/java:7u55-jdk tomcat-8.0.5 struts-2.3.16 를 재현. classLoader는 동작하고 있는데, 정작 로그가 퍼센트 인코딩되어 버려서 RCE까지 이어지지 않네 windows 버전도 추가7u191이지만.... 이것도 안 되니, tomcat이 원인인가..?...

github-logs

GitHub Logs 15TB の GitHub イベントログから OSINT インサイトを抽出 私たちは、GitHub イベントログのデータセット全体を処理・補完する 3 つの Trickest ワークフローを開発し、貴重なインサイトを得ることができました。そして今、この結果をコミュニティ全体が活用できるようになりました。 公開 GitHub プラットフォーム上で特別な siteadmin ステータスを持つ GitHub ユーザーがちょうど 16 人いることをご存知でしたか？ grep コマンドを使って特定の企業に関連するユーザーを特定することに興味はありませんか？...

CVE-2025-29471

Stored XSS Vulnerability in Nagios Log Server Privilege Escalation to Admin ▶️ PoC Demo Date: 2025-04-02 Exploit Author: Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

chainsaw

Windowsフォレンジックアーティファクトを迅速に検索・ハントする Chainsawは、イベントログやMFTファイルなどのWindowsフォレンジックアーティファクト内の脅威を迅速に特定するための強力な「ファーストレスポンス」機能を提供します。Chainsawは、イベントログをキーワードで検索するための汎用的かつ高速な方法を提供し、Sigma検出ルールの組み込みサポートやカスタムChainsaw検出ルールを通じて脅威を特定します。 機能 🎯 Sigma検出ルールとカスタムChainsaw検出ルールを使用した脅威のハント 🔍...

CVE-2026-80518

The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when deriving the storage location of the import logs it writes under the uploads directory, nor does it block direct access to them, allowing unauthenticated attackers to retrieve the personal data of...

CVE-2026-80518

The WP Ultimate CSV Importer WordPress plugin (versions before 9.2 ) is vulnerable to unauthenticated data disclosure. The root cause is the failure to use a site-specific secret when deriving the storage location for import logs within the uploads directory , combined with a lack of direct acces...

EUVD-2026-91830

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

CVE-2026-80518: Exposure of Sensitive Information to an Unauthorized Actor

The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when deriving the storage location of the import logs it writes under the uploads directory, nor does it block direct access to them, allowing unauthenticated attackers to retrieve the personal data of...

PT-2026-104522

Name of the Vulnerable Software and Affected Versions WP Ultimate CSV Importer versions prior to 9.2 Description The plugin fails to use a site-specific secret when determining the storage location for import logs within the uploads directory. Additionally, it does not block direct access to thes...

NPM: Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values

NPM: Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values vulnerability discovered by ? in WordPress Npm trigger.dev versions = 4.5.8...

GHSA-FJ2X-MQQP-3V2W Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values

Affected version: trigger.dev 4.5.3 4.5.6 was advertised by the CLI but was not tested. A staging dry-run executed with trigger.dev deploy --env staging --dry-run --log-level debug. The debug output logged the complete build-worker options object. Its envVars property contained unredacted values...

Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values

Affected version: trigger.dev 4.5.3 4.5.6 was advertised by the CLI but was not tested. A staging dry-run executed with trigger.dev deploy --env staging --dry-run --log-level debug. The debug output logged the complete build-worker options object. Its envVars property contained unredacted values...

CVE-2026-94593

The Armatura One software contains a vulnerability where the backup and restore routine records the full database connection command in a host log file. This includes the superuser password in plain text . If an attacker gains access to the server operating system, they can use these disclosed cr...

CVE-2026-94594 Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

CVE-2026-94594 Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

CVE-2026-94594

The Armatura One message broker is vulnerable to CWE-532 because it logs client connection credentials and associated passwords in plain text during normal operation. Any individual or entity with read access to the application logs, or to associated backups and support bundles containing these l...

CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

PT-2026-104378

Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.3.7 Description The development server in this React framework for building full-stack web applications exposes a Model Context Protocol endpoint that does not reliably restrict cross-site requests. This allo...

CVE-2026-94594: Insertion of Sensitive Information into Log File

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...