nginx_log_check

nginxlogcheck Nginx 로그 보안 분석 스크립트 기능 Top 20 주소 통계 SQL 인젝션 분석 스캐너 경고 분석 취약점 악용 탐지 민감 경로 접근 파일 포함 공격 Webshell 응답 길이 URL Top 20 찾기 드문 스크립트 파일 접근 찾기 302 리디렉션 스크립트 파일 찾기 Usage 보고서 저장 경로 설정 outfile 로그 분석 디렉터리 설정 accessdir 로그 이름 설정 accesslog ./nginxcheck.sh 참고 nmgxy klionsec...

fail2ban-log4j

fail2ban-log4j fail2banのフィルターで、log4j CVE-2021-44228に対する攻撃を検知します。 インストール このファイルをfail2banのfilter.dディレクトリにコピーしてください。通常は以下のような場所にあります。 /etc/fail2ban/filter.d または類似の場所です。 jail.localまたはjail.confにapache-jndiセクションを追加してください： root@kitploit: apache-jndi enabled = true filter = apache-jndi port = http,https...

CVE-2026-91859

Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception. Because CakeErrorController extends AppController, exception rendering runs the application startup path a second time. As a result, accessMonitor calls AccessLog::logRequest twice for one...

CVE-2026-91859 MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass

Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception. Because CakeErrorController extends AppController, exception rendering runs the application startup path a second time. As a result, accessMonitor calls AccessLog::logRequest twice for one...

CVE-2026-91859

MISP (Malware Information Sharing Platform) versions ≤2.5.45 can record incorrect access-log data for HTTP requests that terminate in an exception. The root cause is that CakeErrorController extends AppController , causing the application startup path to execute a second time during exception ren...

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

GHSA-F52W-8J3H-J724 Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

Summary Traefik accepts an HTTP/1.x request whose request-target is in rootless / opaque form for example GET http:http://internal-vhost/admin HTTP/1.1. Go parses this into URL.Opaque with an empty URL.Path, so Traefik evaluates all routing, path-sanitization, middleware and access-log decisions...

Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

Summary Traefik accepts an HTTP/1.x request whose request-target is in rootless / opaque form for example GET http:http://internal-vhost/admin HTTP/1.1. Go parses this into URL.Opaque with an empty URL.Path, so Traefik evaluates all routing, path-sanitization, middleware and access-log decisions...

CVE-2026-88009 Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while leaving URL.Path empty. The rewriteRequestBuilder path evaluates routing, path sanitization, forwardAuth,...

CVE-2026-88009

Traefik , an open-source HTTP reverse proxy and load balancer, is affected by a request-target handling flaw prior to 2.11.57 and 3.7.13 . A rootless HTTP/1 request target is stored by Go in URL.Opaque while URL.Path remains empty. The rewriteRequestBuilder evaluates routing, path sanitization, f...

CVE-2026-88009 Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while leaving URL.Path empty. The rewriteRequestBuilder path evaluates routing, path sanitization, forwardAuth,...

CVE-2026-88009 Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while leaving URL.Path empty. The rewriteRequestBuilder path evaluates routing, path sanitization, forwardAuth,...

PT-2026-89471

Summary Traefik accepts an HTTP/1.x request whose request-target is in rootless / opaque form for example GET http:http://internal-vhost/admin HTTP/1.1. Go parses this into URL.Opaque with an empty URL.Path, so Traefik evaluates all routing, path-sanitization, middleware and access-log decisions...

CLEANSTART-2026-OC78437 Security fixes in access-log-exporter 0.2.0-r0

Package access-log-exporter version 0.2.0-r0 fixes 5 vulnerabilities: CVE-2026-33818, CVE-2026-56860, CVE-2026-56862, CVE-2026-56853, CVE-2026-46600...

CLEANSTART-2026-LF30941 Security fixes in access-log-exporter 0.3.20-r0

Package access-log-exporter version 0.3.20-r0 fixes 8 vulnerabilities: CVE-2026-46600, CVE-2026-33818, CVE-2026-39821, CVE-2026-56853, CVE-2026-56858...

PT-2026-80742

Name of the Vulnerable Software and Affected Versions Ember affected versions not specified Description An unauthenticated remote attacker can inject terminal escape sequences into the operator's terminal user interface TUI by sending HTTP requests with control bytes in the request target to a...

CLEANSTART-2026-YB06143 Security fixes in access-log-exporter 0.1.15-r0

Package access-log-exporter version 0.1.15-r0 fixes 1 vulnerabilities: CVE-2026-39824...

SUSE-SU-2026:22646-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example bsc1269791. - CVE-2026-53404: always-incorrect control flow implementation in the rewrite valve caus...

SUSE-SU-2026:2675-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165. -...

Security Bulletin: Vulnerabilities found in Watson Data Intelligence

Summary Multiple Vulnerabilities were addressed in Watson Data Intelligence version 5.3.1-patch3. Vulnerability Details CVEID:CVE-2025-14917 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expecte...