EUVD-2019-9240

Malware in sbrugna...

EUVD-2021-0675

Malware in sbrugna...

EUVD-2017-3770

Malware in sbrugna...

EUVD-2021-10115

Malware in sbrugna...

EUVD-2019-6557

Malware in sbrugna...

EUVD-2015-4118

Malware in sbrugna...

EUVD-2014-4254

Malware in sbrugna...

EUVD-2021-24412

Malware in sbrugna...

EUVD-2020-30208

Malware in sbrugna...

EUVD-2019-8210

Malware in sbrugna...

EUVD-2015-8021

Malware in sbrugna...

EUVD-2019-15062

Malware in sbrugna...

EUVD-2017-17393

Malware in sbrugna...

EUVD-2021-0657

Malware in sbrugna...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

EUVD-2025-32895

Nagios Log Server before 2024R1.3.2 allows authenticated users with read-only API access to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Could not stop elasticsearch" is in the API response...

PT-2025-41175

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2024R1.3.2 Description Nagios Log Server before version 2024R1.3.2 allows authenticated users with read-only API access to stop the Elasticsearch service. This is achieved by making a call to the...

Nagios Log Server 安全漏洞

Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios, Inc. A security vulnerability exists in Nagios Log Server versions prior to 2024R1.3.2, which originates from an authenticated user being able to stop the Elasticsearch service via an API...

CubeAPM 安全漏洞

CubeAPM is a code development tool from CubeAPM, Inc. A security vulnerability exists in the CubeAPM nightly-2025-08-01-1 release that originates from an unauthenticated attacker being able to inject arbitrary log entries via the /api/logs/insert/elasticsearch/bulk endpoint, which could lead to l...

CVE-2025-44824

Nagios Log Server prior to 2024R1.3.2 is affected by CVE-2025-44824. An authenticated user with read-only API access can call /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch to stop Elasticsearch. The API reportedly returns could not stop elasticsearch, yet the service stops, e...