duckLogger

DuckLogger DuckLogger es un registrador de teclas USB basado en ESP32-S3. Registra las pulsaciones de teclas en un archivo de texto y proporciona acceso inalámbrico para descargar los registros a través de un punto de acceso Wi-Fi integrado. Recrear este proyecto no requiere ninguna PCB...

CVE-2020-11851

CVE-2020-11851 Remote Code Execution vulnerability on ArcSight Logger via ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Executive Summary Vulnerability Background ArcSight Logger is a comprehensive log management solution that eases compliance burdens and enables fast...

BeeLogger

BeeLogger Copyright 2017 BeeLogger Escrito por: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official ¡HERRAMIENTA DISEÑADA PARA BUENOS PROPÓSITOS, PENTESTS, NO SEAS UN CRIMINAL! Descárgalo solo aquí, no confíes en otros lugares. NOTA: BeeLogger solo tiene soporte oficial para idiomas latinos en este...

freedomfighting

Scripts de lucha por la libertad Este repositorio contiene scripts que pueden ser útiles durante tus actividades de lucha por la libertad. Se actualizará ocasionalmente, cuando me encuentre en necesidad de algo que no pueda encontrar en línea. Todo aquí se distribuye bajo los términos de la...

PwnFox

PwnFox PwnFox es una extensión de Firefox/Burp que proporciona herramientas útiles para tu auditoría de seguridad. Si eres usuario de Chrome, puedes visitar https://github.com/nccgroup/autochrome. PwnFox Funcionalidades Un solo clic en BurpProxy Perfiles de Contenedores Registrador de PostMessage...

cve-2022-22965

Minimal CVE-2022-22965 example At the time of writing, spring-web request params binding WebDataBinder, by default allows accessing object's getClass method. This is an internal jvm specific implementation detail imho shouldn't be exposed. As such, its features may change and be expanded with...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2025-10951

CVE-2025-10951 - checkmlloggertraversal.py Proof-of-existence checker for CVE-2025-10951 / GHSA-8x9j-2p8r-7xc6 — an unauthenticated path traversal in geyang/ml-logger ≤ 0.10.36, affecting the loghandler / streamhandler functions in mllogger/server.py. For use only against systems you are authoriz...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — ml-logger streamhandler Arbitrary File Read This repository provides a standalone Python script — CVE-2025-10952.py — that exploits an unauthenticated arbitrary file read vulnerability in ml-logger's streamhandler, chained with the /glob endpoint for filesystem enumeration. When...

CVE-2026-21011-Log4j-style-JNDI-Injection-in-Custom-Logger-Simulated-

CVE-2026-21011 – Log4j‑style JNDI Injection in Custom Logger Simulated Program Code Java simulation in Python log4jsim.py - Custom logger that evaluates $... patterns import subprocess, re def logmessage: Vulnerable: looks up JNDI-like syntax and executes pattern = r'$\jndi:.+?' for match in...

LoggerPlusPlus

Logger++ Advanced Logging for Burp Suite Developed by Corey Arthur Originally by Soroush Dalili Released as open source by NCC Group Plc - https://www.nccgroup.com/ Released under AGPL-3.0 see LICENSE for more information Description Logger++ is a multithreaded logging extension for Burp Suite. I...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate This POC uses Spring / Hibernate, however a similar approach of rmi - deserialization could be used to trigger any deserialization vulnerability TL;DR $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080 --data-binary...

CVE-2026-78242

The Apache APISIX gateway (version 3.17.0 ) is susceptible to an insertion of sensitive information into log files vulnerability. Under specific response structures, the data-mask component may fail to redact request headers, resulting in unmasked header values being written to the log sink. To r...

CVE-2026-78242 Apache APISIX: data-mask may fail to redact request headers in logger output

Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the log sink under a certain response structure. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0,...

alpr-dashboard-patches

ALPR Dashboard runtime patches Two drop-in patches for the algertc/alpr-dashboard Docker project. Both are deployable without modifying or rebuilding the upstream image. What's here logger-fix/ — async logger + cleanup throttle Replaces the built-in sync log transport full-file read + rewrite on...

Klever-Go: /log controls global node logging

An unauthenticated client can connect to GET /log, send an arbitrary logger profile as the first WebSocket message, and mutate the node's global logging configuration before receiving live logs from the process. I confirmed this against a local validator built from this repository: an...

The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...

Astra Linux – Vulnerability in Wireshark

The TTX logger file parser crashes in versions 4.6.0 to 4.6.7, allowing denial of service...

CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

TencentOS Server 4: wireshark (TSSA-2026:0956)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0956 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...