EUVD-2021-18703

Malware in sbrugna...

EUVD-2021-0670

Malware in sbrugna...

EUVD-2021-0675

Malware in sbrugna...

EUVD-2020-20317

Malware in sbrugna...

EUVD-2018-15613

Malware in sbrugna...

EUVD-2017-3770

Malware in sbrugna...

EUVD-2021-0657

Malware in sbrugna...

EUVD-2019-6557

Malware in sbrugna...

EUVD-2020-30208

Malware in sbrugna...

EUVD-2019-8210

Malware in sbrugna...

EUVD-2019-15062

Malware in sbrugna...

EUVD-2015-8021

Malware in sbrugna...

EUVD-2015-4118

Malware in sbrugna...

EUVD-2014-4254

Malware in sbrugna...

EUVD-2021-24412

Malware in sbrugna...

EUVD-2017-17393

Malware in sbrugna...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

EUVD-2025-32895

Nagios Log Server before 2024R1.3.2 allows authenticated users with read-only API access to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Could not stop elasticsearch" is in the API response...

CubeAPM 安全漏洞

CubeAPM is a code development tool from CubeAPM, Inc. A security vulnerability exists in the CubeAPM nightly-2025-08-01-1 release that originates from an unauthenticated attacker being able to inject arbitrary log entries via the /api/logs/insert/elasticsearch/bulk endpoint, which could lead to l...

CVE-2025-44824

Nagios Log Server prior to 2024R1.3.2 is affected by CVE-2025-44824. An authenticated user with read-only API access can call /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch to stop Elasticsearch. The API reportedly returns could not stop elasticsearch, yet the service stops, e...