CVE-2026-57171

creationtimestamp| type| source ---|---|--- 2026-08-26 00:34:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ar4qbv6h6ay2d 2026-09-24 19:52:34+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-r4vp-3vw6-r2x5 2026-09-25 03:30:32+00:00| seen|...

CVE-2026-76197

creationtimestamp| type| source ---|---|--- 2026-08-25 19:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwiwvuyjr27 2026-08-25 20:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwmonpek32p 2026-08-25 23:40:05+00:00| seen|...

CVE-2026-14457

creationtimestamp| type| source ---|---|--- 2026-08-25 15:58:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtw6qb4pfk2b 2026-08-25 16:27:45+00:00| seen| https://bsky.app/profile/derdreschi84.bsky.social/post/3mtwaelgpws23 2026-08-26 01:09:35+00:00| seen|...

CVE-2026-15571

creationtimestamp| type| source ---|---|--- 2026-08-25 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwiw3pf26...

PT-2026-81898

Name of the Vulnerable Software and Affected Versions Drupal Powerful Surveys affected versions not specified Description An issue exists in the Drupal Powerful Surveys module. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2026-78265

creationtimestamp| type| source ---|---|--- 2026-08-24 23:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufu62l7y24 2026-08-24 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuhit53l42p 2026-08-25 00:08:22+00:00| seen|...

CVE-2026-39975

creationtimestamp| type| source ---|---|--- 2026-08-24 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtu2nkbaek2e 2026-08-24 20:08:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu4acx27o2f 2026-08-25 06:00:05+00:00| seen|...

CVE-2026-76205

creationtimestamp| type| source ---|---|--- 2026-08-24 17:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405 2026-08-25 00:00:22+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405...

CVE-2026-78255

creationtimestamp| type| source ---|---|--- 2026-08-24 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy4p6mf2rxbjw...

CVE-2026-78057

creationtimestamp| type| source ---|---|--- 2026-08-23 04:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ftkgjp5wud4yh...

CVE-2026-71513

creationtimestamp| type| source ---|---|--- 2026-08-22 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpewfmcze22 2026-08-23 01:10:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtpm5xzluq2i 2026-08-23 01:10:31+00:00| seen|...

Tigera Calico 安全漏洞

Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workload scenarios. Tigera Calico has a security vulnerability that arises from printing the complete connection configuration structure when calle...

WS-2017-3768

Information Exposure vulnerability due to logging all of the bytes uploaded when the logger is set to the INFO level, a possible confidential information in those bytes...

CVE-2026-34164: Insertion of Sensitive Information into Log File

Valtimo is an open-source business process automation platform. In versions 13.0.0 through 13.21.0, the InboxHandlingService logs the full content of every incoming inbox message at INFO level. Inbox messages can contain highly sensitive information including personal data PII, citizen identifier...

Insertion of Sensitive Information into Log File

Overview github.com/authzed/spicedb/pkg/cmd/server is a Google Zanzibar-inspired fine-grained permissions database Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the configuration log output during startup when the log level is set to info...

AWS VDP: Encryption context keys and values logged at INFO level

Component: cmd/server/main.go:101-106 Affected Version: aws-encryption-provider @ 4341c70 all versions Found by: Source audit TLP: TLP:Amber --- Summary The server startup code logs all encryption context key-value pairs at INFO level. Encryption context is metadata associated with KMS operations...

CVE-2026-32598 OneUptime: Password Reset Token Logged at INFO Level

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL — containing the plaintext reset token — at INFO log level, which is enabled by default in production. Anyone with access to application logs log...

CVE-2026-32598

The CVE concerns OneUptime. Before version 10.0.24, the password reset flow logged the full password reset URL, including the plaintext token, at INFO level by default in production. This allowed anyone with access to application logs (e.g., log aggregation, Docker logs, Kubernetes pod logs) to i...

CVE-2026-24308: Insertion of Sensitive Information into Log File

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential producti...

RustFS Logs Sensitive Credentials in Plaintext

Summary RustFS logs sensitive credential material access key, secret key, session token to application logs at INFO level. This results in credentials being recorded in plaintext in log output, which may be accessible to internal or external log consumers and could lead to compromise of sensitive...