The vulnerability of the Splunk Enterprise platform for operational analysis lies in its improper handling of output data from registration logs. This allows attackers to poison, falsify, or conceal confidential data in these logs.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to poison, falsify, or hide confidential data from log records using specially created HT...

Linux Distros Unpatched Vulnerability : CVE-2023-54151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: Fix system crash due to lack of free space in LFS When f2fs tries to checkpoint during foreground gc in LFS mode, system crash occurs due to lack of free...

CVE-2025-68919: Insertion of Sensitive Information into Log File

Fujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express DX / AF Management Software before 16.8-16.9.1 PA 2025-12, when collected maintenance data is accessible by a principal/authority other than ETERNUS SF Admin, allows an attacker to potentially affect system confidentiality, integrity, and...

CVE-2023-54145: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...

PT-2025-53222

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a fixed-size buffer of 1024 bytes in the verifier can be triggered by user-provided information, leading to a "verifier log line truncated"...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a user-triggable warning that could lead to log truncation...

Linux Distros Unpatched Vulnerability : CVE-2023-54145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger verifier log line truncated warning, as verifier has a...

Fujitsu多款产品和Fsas多款产品 日志信息泄露漏洞

Fsas Technologies ETERNUS SF and others are products of Fsas Technologies, Japan.Fsas Technologies ETERNUS SF is a storage system replication and backup management software.Fujitsu ETERNUS SF ACM and others are products of Fujitsu, Japan. Fujitsu ETERNUS SF ACM is a data replication, backup, and...

Malicious code in start-log-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209207b530cc6132d223aef076b74b150c66f7ccdfb2672191a14dee02307daa The package start-log-backend was found to contain malicious code. Source: ghsa-malware...

Malicious code in start-log-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5bc70fc220a38dd997887f438e9a6d5afb70cf1d30dd8b95a664e013a7309e The package start-log-plugin was found to contain malicious code. Source: ghsa-malware 3ef7e02e352e8d339add82817454f490a0e4588fffb1dcafa53cc0136f4e9d...

EUVD-2025-204870

Malicious code in start-log-backend npm...

EUVD-2025-204872

Malicious code in start-log-plugin npm...

Malicious Package

Overview start-log-backend is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview start-log-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-192759 Malicious code in start-log-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5bc70fc220a38dd997887f438e9a6d5afb70cf1d30dd8b95a664e013a7309e The package start-log-plugin was found to contain malicious code. Source: ghsa-malware 3ef7e02e352e8d339add82817454f490a0e4588fffb1dcafa53cc0136f4e9d...

MAL-2025-192758 Malicious code in start-log-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209207b530cc6132d223aef076b74b150c66f7ccdfb2672191a14dee02307daa The package start-log-backend was found to contain malicious code. Source: ghsa-malware...

CVE-2025-34290

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating...

The vulnerability of the AIDE intrusion detection system arises from the improper processing of output data for log records, allowing attackers to circumvent existing security restrictions.

The vulnerability of the AIDE intrusion detection system is related to incorrect processing of output data for log records. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

EUVD-2025-204643

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating...

CVE-2025-34290

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating...