EUVD-2022-48746

Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...

CVE-2022-45899

Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...

CVE-2022-45899

Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...

CVE-2022-45899: Improper Neutralization of Special Elements used in an OS Command

Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...

PT-2026-38659

Name of the Vulnerable Software and Affected Versions Nokia Broadcast Message Center BMC versions prior to 13.1 Description An unauthenticated remote attacker can perform OS command injection with root privileges. This is possible by using shell metacharacters within the Log Scanner Search Patter...

CVE-2022-45899

Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...

CVE-2022-45899

Nokia Broadcast Message Center (BMC) versions prior to 13.1 are vulnerable to an OS command injection vulnerability (CVE-2022-45899). An unauthenticated remote attacker can execute arbitrary commands with root privileges by providing shell metacharacters in the Log Scanner Search Pattern field of...

CVE-2025-31139: Insertion of Sensitive Information into Log File

In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...

CVE-2025-24457: Insertion of Sensitive Information into Log File

In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs...

Nokia BMC Log Scanner 13 Command Injection

Exploit Title: Nokia BMC Log Scanner Remote Code Execution Google Dork: N/A Date: November 29, 2023 Exploit Author: Carlos Andres Gonzalez, Matthew Gregory Vendor Homepage: https://www.nokia.com/ Software Link: N/A Version: 13 Tested on: Linux CVE : CVE-2022-45899 Description The BMC Log Scanner...

Nokia BMC Log Scanner - Remote Code Execution

Exploit Title: Nokia BMC Log Scanner Remote Code Execution Google Dork: N/A Date: November 29, 2023 Exploit Author: Carlos Andres Gonzalez, Matthew Gregory Vendor Homepage: https://www.nokia.com/ Software Link: N/A Version: 13 Tested on: Linux CVE : CVE-2022-45899 Description The BMC Log Scanner...

CVE-2023-38067: Insertion of Sensitive Information into Log File

In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log...

CVE-2022-25829: Exposure of Sensitive Information to an Unauthorized Actor

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25830: Exposure of Sensitive Information to an Unauthorized Actor

Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25828: Exposure of Sensitive Information to an Unauthorized Actor

Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25827: Exposure of Sensitive Information to an Unauthorized Actor

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25826: Exposure of Sensitive Information to an Unauthorized Actor

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log...

Apache Log4Shell RCE detection via callback correlation (Direct Check FTP)

Binary data log4jlog4shellftp.nbin...

CVE-2020-13340: Improper Neutralization of Input During Web Page Generation

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log...

Potential remote root in CodeBlue log scanner

TITLE: Potential remote root in CodeBlue log scanner NAME: DEMI SEX GOD FROM HELL ADV 00001 DATE: YES, PLEASE MAIL ME IF YOU ARE FEMALE send pictures CRAZY TRACKING NUMBER THAT MAKES IT LOOK LIKE I HAVE SOME MASSIVE DATABASE OF JUAREZ: 7363A64B02 Props to dme@! Information ----------- About:...