Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228 checker This is the repository for checking fo...

Huawei eCNS280_TD 信息泄露漏洞

Huawei eCNS280TD is a core network device of the wireless broadband trunking system of Huawei China. Huawei eCNS280TD is vulnerable to an information disclosure vulnerability caused by improper management of log output. An attacker with access to the device log files could exploit the vulnerabili...

PT-2021-22787

Name of the Vulnerable Software and Affected Versions eCNS280 TD version V100R005C10SPC650 Description The issue is caused by improper log output management, allowing an attacker with access to the device's log file to potentially disclose information. This could lead to information leakage if th...

PYSEC-2021-435

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs...

NetApp Cloud Manager 信息泄露漏洞

Netapp NetApp Cloud Manager is an application from Netapp, Inc. It provides centralized orchestration of hybrid cloud storage and data management services. A security vulnerability exists in NetApp Cloud Manager versions prior to 3.9.9 that originates from abnormal log file output from a networke...

MV IDCE application 日志信息泄露漏洞

The MV IDCE application is a software application. A log information disclosure vulnerability exists in the MV IDCE application. The vulnerability arises from the abnormal output of log files from a networked system or product...

Elasticsearch Log Information Disclosure Vulnerability

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. A log information disclosure vulnerability exists in Elasticsearch that originates...

Teradici PCoIP Agents Log Information Disclosure Vulnerability

A log information disclosure vulnerability exists in Teradici PCoIP Agents that originates from the abnormal output of log files from a networked system or product...

Elasticsearch 日志信息泄露漏洞

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. A log information disclosure vulnerability exists in Elasticsearch that originates...

SUSE-SU-2020:3473-1 Security update for ceph

This update for ceph fixes the following issues: - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Added --container-init feature bsc1177319, bsc1163764 - Made journald as the logdriver again bsc1177933 - Fixes a condition check for copytree, copyfiles, and movefiles in...

HUAWEI Taurus-AN00B Information Disclosure Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in HUAWEI Taurus-AN00B. The vulnerability stems from the device's failure to adequately examine the contents of the log output in a particular scenario, which allows an attacker to obtain...

Default configuration

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...

CVE-2020-9486

CVE-2020-9486 affects Apache NiFi 1.10.0–1.11.4, where the stateless execution engine logs a flow definition configuration JSON during trigger, potentially revealing sensitive property values in plaintext. The vulnerability, described as information disclosure, is evidenced by multiple sources (N...

CVE-2020-9486

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...

CVE-2020-9486

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...

PT-2020-20696

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.10.0 through 1.11.4 Description The issue concerns the NiFi stateless execution engine producing log output that includes sensitive property values. When a flow is triggered, the flow definition configuration JSON is...

ezEmu - Simple Execution Of Commands For Defensive Tuning/Research

ezEmu enables users to test adversary behaviors via various execution techniques. Sort of like an "offensive framework for blue teamers ", ezEmu does not have any networking/C2 capabilities and rather focuses on creating local test telemetry. Windows See /Linux for ELF ezEmu is compiled as...

PT-2020-6577

Name of the Vulnerable Software and Affected Versions Ansible Engine affected versions not specified Description A flaw was found in the Ansible Engine when using module args. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This fla...

[SECURITY] Fedora 32 Update: log4net-2.0.8-10.fc32

log4net is a tool to help the programmer output log statements to a variety of output targets. log4net is a port of the excellent log4j framework to the .NET runtime...

[SECURITY] Fedora 31 Update: log4net-2.0.8-10.fc31

log4net is a tool to help the programmer output log statements to a variety of output targets. log4net is a port of the excellent log4j framework to the .NET runtime...