30012 matches found
CVE-2026-59326: Insertion of Sensitive Information into Log File
The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...
PT-2026-66360
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...
PT-2026-66407
Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in the Permission Model enforcement allows the trace events.createTracing.enable function to write trace logs outside the boundaries defined by the...
PT-2026-66348
A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...
PT-2026-66483
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user...
Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Phoenix Contact CHARX SEC-3000 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the generation of log files. The issue results...
Oracle Linux 10 : kernel (ELSA-2026-45114)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-45114 advisory. - futex: Drop CLONETHREAD requirement for private default hash alloc Audra Mitchell RHEL-193518 CVE-2026-52973 - net: ipv6: fix NOREF dst use in seg6...
CVE-2026-67247: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...
(Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3150 devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...
CVE-2026-67439
OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/api/api.go StartActionAndWait and StartActionByGetAndWait endpoints return full LogEntry output after execution without enforcing the logs permission, allowing a user...
CVE-2026-67439
OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/api/api.go StartActionAndWait and StartActionByGetAndWait endpoints return full LogEntry output after execution without enforcing the logs permission, allowing a user...
CVE-2026-40272
Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...
Exploit for Deserialization of Untrusted Data in Mediawiki
CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry...
CVE-2026-40272
CVE-2026-40272 involves an improper input validation in the decode() function of the traceparser library. The issue affects processes that use libtraceparser on QNX hosts/targets and can be triggered by a corrupted kernel trace event log (.kev) file. The underlying consequence is the potential ex...
CVE-2026-40272 Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform
Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the process of logging SQL CONNECT statements, where passwords enclosed in double quotes are not properly sanitized. An attacker can obtain sensitive database credentials by accessing...
CVE-2026-65887
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox 2.20.2 - The resetPassword method allows actors to reset any user password, allowing to login and act as these users - excluding super admins...
github.com/sigstore/sigstore-go: sigstore-go: Security Policy Bypass via Compromised Log
A flaw was found in sigstore-go, a Go library for Sigstore signing and verification. This vulnerability allows a single compromised transparency log or Certificate Transparency CT log to bypass the multi-log threshold requirements. An attacker could exploit this by compromising a single log,...
github.com/sigstore/sigstore-go: sigstore-go: Security Policy Bypass via Compromised Log
A flaw was found in sigstore-go, a Go library for Sigstore signing and verification. This vulnerability allows a single compromised transparency log or Certificate Transparency CT log to bypass the multi-log threshold requirements. An attacker could exploit this by compromising a single log,...
CVE-2020-16845
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:53+00:00| seen| https://t.me/oleglog/3455 2026-07-30 00:02:05+00:00| seen| https://t.me/oleglog/3455 2026-08-01 18:00:05+00:00| seen| https://t.me/oleglog/3455 2026-08-02 00:00:24+00:00| seen| https://t.me/oleglog/3455...