EUVD-2021-25319

Malware in sbrugna...

Elasticsearch 8.18.8, 8.19.5, 9.0.8, 9.1.5 Security Update (ESA-2025-18)

Elasticsearch Insertion of sensitive information in log file ESA-2025-18 Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API Affected Versions: 7.x: All versions from 7.0.0 and u...

EUVD-2023-47900

Malicious code in bioql PyPI...

EUVD-2023-1505

Malicious code in bioql PyPI...

EUVD-2025-21062

Malicious code in bioql PyPI...

EUVD-2022-33484

Malicious code in bioql PyPI...

EUVD-2023-40443

Malicious code in bioql PyPI...

EUVD-2025-21059

Malicious code in bioql PyPI...

EUVD-2025-7384

Malicious code in bioql PyPI...

EUVD-2025-21058

Malicious code in bioql PyPI...

EUVD-2024-3397

Malicious code in bioql PyPI...

EUVD-2021-28338

Malicious code in bioql PyPI...

EUVD-2024-48911

Malicious code in bioql PyPI...

EUVD-2023-24033

Malicious code in bioql PyPI...

EUVD-2022-53208

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.22

Logging for Red Hat OpenShift - 5.8.22 Red Hat OpenShift Logging 5.8.22 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

web-application-firewall

🔒 Project 2 — WAF Rule Development & Evasion Testing Projec...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the audit events that record password reminder answers. An attacker can access sensitive user information by retrieving password reminder answers from audit logs. Remediation Upgrade...

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

CVE-2025-59424

LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting XSS vulnerability has been identified on the /system/audit page. The application fails to properly sanitize the username field before it is rendered in the audit log. An authenticated attacker...