CVE-2026-25331

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log wp-security-audit-log allows DOM-Based XSS.This issue affects WP Activity Log: from n/a through = 5.5.4...

CRLF Injection

Litestar is vulnerable to CRLF Injection. The vulnerability is due to unescaped URL paths during exception logging, which allows an attacker to inject newline characters and forge or manipulate log entries...

CVE-2026-2502

The xmlrpc attacks blocker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0, via the 'X-Forwarded-For' HTTP header. This is due to the plugin trusting and logging attacker-controlled IP header data and rendering debug log entries without outp...

CVE-2026-25548

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A critical Remote Code Execution RCE vulnerability exists in InvoicePlane 1.7.0 through a chained Local File Inclusion LFI and Log Poisoning attack. An authenticated administrator can execute...

CVE-2026-2605

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...

CVE-2026-2605

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...

CVE-2026-2350

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-2350

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-1292

Tanium addressed an insertion of sensitive information into log file vulnerability in Trends...

CVE-2026-1292

Tanium addressed an insertion of sensitive information into log file vulnerability in Trends...

openITCOCKPIT 代码问题漏洞

openITCOCKPIT is an open-source system monitoring software. Versions of openITCOCKPIT 5.3.1 and earlier have code vulnerabilities. These vulnerabilities stem from unsafe PHP deserialization patterns when processing change log entries, which may lead to potential PHP object injection vulnerabiliti...

SVXportal 安全漏洞

SVXportal is a portal website developed by Peter as an individual developer. Versions of SVXportal 2.5 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the lack of validation for the search query parameter in the admin/log.php file, which could lead to...

CVE-2026-2853: Stack-based Buffer Overflow

A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub462E14 of the file /boafrm/formSysLog of the component System Log Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated...

CVE-2026-2350: Insertion of Sensitive Information into Log File

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

PT-2026-21287

A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub 462E14 of the file /boafrm/formSysLog of the component System Log Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated...

Apache Airflow < 3.1.6 Information Disclosure

The version of Apache Airflow installed on the remote host is prior to 3.1.6. It is, therefore, affected by an information disclosure vulnerability: - The proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not...

CVE-2026-2605: Insertion of Sensitive Information into Log File

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...

PT-2026-21272

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value directly into an HTML input value attribute,...

Tanium TanOS 安全漏洞

Tanium TanOS is a proprietary operating system developed by the American company Tanium. Tanium TanOS has a security vulnerability that stems from the insertion of sensitive information into log files. This vulnerability may allow attackers with access to TanOS’ syslog output to obtain the...

Tanium Interact和Tanium TDS 安全漏洞

Tanium Interact and Tanium TDS are both products of the American company Tanium. Tanium Interact is a query and interaction component for terminal management platforms. Tanium TDS is a cache library component for terminal data. Both Tanium Interact and Tanium TDS have security vulnerabilities...