61 matches found
winevt_logs_analysis
Analyse des logs Winevt Connexions distantes Script simple pour trouver les connexions distantes à une machine Windows et idéalement certaines adresses IP publiques. Il vérifie certains EventIDs relatifs aux connexions et sessions distantes. Vous devez pip install -r requirements.txt pour que le...
zerologon
zerologon 비호환 디바이스를 나타내는 이벤트를 확인합니다 - CVE-2020-1472 EventID 5827 EventID 5828 EventID 5829 EventID 5830 EventID 5831 8월에 Microsoft는 CVE-2020-1472를 패치했습니다. 해당 패치에는 2021년 2월 9일까지의 대기 기간이 있으며, 그 기간 동안 비보안 연결이 허용됩니다. 2월 9일 패치 이후에는 비보안 클라이언트가 거부됩니다...
CVE-2026-64106
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that...
CVE-2026-64106
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that...
CVE-2026-64106 KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual ITS supports. The live MAPD path rejects that...
PT-2026-61423
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 vgic-its component where the vgic its restore dte function fails to validate the Size field of a restored ITS Device Table Entry DTE. This allows userspa...
CVE-2026-3321: Authorization Bypass Through User-Controlled Key
A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/EVENTID/TIMESTAMP/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A history. This publicly exposed data may...
EUVD-2004-1546
Malware in sbrugna...
EUVD-2004-0036
Malware in sbrugna...
EUVD-2008-2863
Malware in sbrugna...
EUVD-2013-3893
Malware in sbrugna...
EUVD-2006-2019
Malware in sbrugna...
Application logs on VMware-hosted Cloud Connector show SQLWRITER EventID 8193
Application event logs on the Cloud Connector may show repeated errors for SQLWRITER with the EventID 8193. SQL writer error: Unexpected error calling routine CoCreateInstance. hr = 0x80040154. The SqlWriterLogger.txt file will show repeated errors similar to the following. 02/12/2025 21:15:26, T...
Get-AppLockerEventlog - Script For Fetching Applocker Event Log By Parsing The Win-Event Log
This script will parse all the channels of events from the win-event log to extract all the log relatives to AppLocker. The script will gather all the important pieces of information relative to the events for forensic or threat-hunting purposes, or even in order to troubleshoot. Here are the log...
Zoho ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-04288)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
CVE-2019-19649
Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function...
PT-2019-15901 · Zoho · Zoho Manageengine Applications Manager
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions prior to 13620 Description: The issue allows for remote unauthenticated SQL injection. This is achieved via the eventid parameter to the SyncEventServlet endpoint, specifically targeting the doG...
CVE-2019-19649: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function...
PT-2018-5746
Name of the Vulnerable Software and Affected Versions: Qualcomm Android for MSM versions prior to security patch level 2018-04-05 Firefox OS for MSM versions prior to security patch level 2018-04-05 QRD Android versions prior to security patch level 2018-04-05 Description: The issue arises from t...