PT-2026-20394

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

PT-2026-20392

Improper Access Control IDOR in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive...

Graylog Web Interface 跨站脚本漏洞

The Graylog Web Interface is a web interface provided by the American company Graylog. Version 2.2.3 of the Graylog Web Interface contained a cross-site scripting vulnerability. This vulnerability stemmed from insufficient cleaning and escaping of HTML output, which could allow arbitrary JavaScri...

EUVD-2021-24241

Malware in sbrugna...

EUVD-2021-24240

Malware in sbrugna...

EUVD-2024-0682

Malicious code in bioql PyPI...

EUVD-2022-0790

Malicious code in bioql PyPI...

EUVD-2025-13874

Malicious code in bioql PyPI...

EUVD-2022-2137

Malicious code in bioql PyPI...

EUVD-2023-2058

Malicious code in bioql PyPI...

EUVD-2025-29412

Malicious code in bioql PyPI...

EUVD-2025-19760

Malicious code in bioql PyPI...

EUVD-2022-2277

Malicious code in bioql PyPI...

EUVD-2024-3317

Malicious code in bioql PyPI...

EUVD-2025-10045

Malicious code in bioql PyPI...

EUVD-2023-1928

Malicious code in bioql PyPI...

EUVD-2022-4096

Malicious code in bioql PyPI...

EUVD-2024-0497

Malicious code in bioql PyPI...

CVE-2025-53106

Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the malicious user knows the ID. For the...

CVE-2025-53106

Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the malicious user knows the ID. For the...