909 matches found
CVE-2020-27519
Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn config. A local attacker could leverage the log and log-append along with log injection to create or append to privileged script files and...
CVE-2020-27519
Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn config. A local attacker could leverage the log and log-append along with log injection to create or append to privileged script files and...
Privilege escalation
Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn config. A local attacker could leverage the log and log-append along with log injection to create or append to privileged script files and...
CVE-2020-27519
CVE-2020-27519 affects Pritunl Client v1.2.2550.20, with a local privilege-escalation in the pritunl-service component. The attack vector is a malicious OpenVPN config; a local attacker can abuse log and log-append with log injection to create or append to privileged script files and execute code...
CVE-2020-27519
Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn config. A local attacker could leverage the log and log-append along with log injection to create or append to privileged script files and...
pritunl 安全漏洞
pritunl is a distributed enterprise vpn service based on the Open VPN protocol for individual developers. The product provides visualization of vpn connection status. A security vulnerability exists in Pritunl Client v1.2.2550.20, which can be exploited by a local attacker with a malicious openvp...
GO-2020-0001 Arbitrary log line injection in github.com/gin-gonic/gin
The default Formatter for the Logger middleware LoggerConfig.Formatter, which is included in the Default engine, allows attackers to inject arbitrary log entries by manipulating the request path...
PT-2021-12082 · Gin · Gin-Gonic/Gin
Name of the Vulnerable Software and Affected Versions: gin-gonic/gin versions prior to 1.6.0 Description: The issue allows remote attackers to inject arbitrary log lines due to unsanitized input in the default logger. This can be achieved by manipulating the request path, which affects the defaul...
GitHub Security Lab: Java : Add query for detecting Log Injection vulenrabilities
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java : Add query for detecting Log Injection vulenrabilities
This bug was reported directly to GitHub Security Lab...
USN-4775-1 lighttpd vulnerabilities
It was discovered that Lighttpd did not properly sanitized the string used in basic HTTP authentication method. A remote attacker could use this to inject arbitrary log entries and maybe obtain sensitive information. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. CVE-2015-3200 It...
CVE-2019-25023
The CVE-2019-25023 issue affects Scytl sVote 2.1, where an attacker can manipulate the X-Forwarded-For header to inject arbitrary IP addresses into internal application logs due to the logs using that header. The root cause is trusting a client-controlled header for logging. Connected sources (Re...
Scytl sVote 安全漏洞
Scytl sVote is a Spanish Scytl open source application. Provides voters to vote online. A security vulnerability exists in Scytl sVote 2.1, which can be exploited by attackers to inject incorrect IP addresses into logs...
Security Bulletin: Log injection is possible in Daeja ViewONE Professional, Standard & Virtual
Summary A specially crafted request or annotation in ViewONE could inject a realistic looking log line. Vulnerability Details CVEID: CVE-2017-1210 DESCRIPTION: IBM Daeja ViewONE Professional, Standard & Virtual could allow an unathenticated attacker to inject data into log files made to look...
GitHub Security Lab: [javascript] CWE-117: CodeQL query to detect Log Injection
This bug was reported directly to GitHub Security Lab...
Log injection in uvicorn
This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the console or a log file. When attackers request craft...
DEBIAN-CVE-2020-7694
This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the console or a log file. When attackers request craft...
CVE-2020-7694 Log Injection
This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the console or a log file. When attackers request craft...
Log Injection
Overview uvicorn is a lightning-fast ASGI server. Affected versions of this package are vulnerable to Log Injection. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its...