SUSE CVE-2009-3880

The Abstract Window Toolkit AWT in Java Runtime Environment JRE in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the...

SUSE CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

SUSE CVE-2021-40540

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

SUSE CVE-2022-26520

In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...

Malicious code in yandex-logger-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c81d36303d3e14463172a01a3d04fd2b8b0456c22bc8fcbc4df9fc4c27ac65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-logger-std (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c058819d25d1e98333c17166cbad13c51000407b8955ed454fc161515450ce71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-logger-qloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a97249a6dcc4c34ed76e9865aa3f3a919e152716c220e2fa7a1650dba9b22226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-qloud-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ea09cd18d7a4ebab28f95cbef194e9b6e91e9ce5e4e30943af638e29ba6708 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-987 Malicious code in yandex-logger-std (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c058819d25d1e98333c17166cbad13c51000407b8955ed454fc161515450ce71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-985 Malicious code in yandex-logger-qloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a97249a6dcc4c34ed76e9865aa3f3a919e152716c220e2fa7a1650dba9b22226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-986 Malicious code in yandex-logger-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c81d36303d3e14463172a01a3d04fd2b8b0456c22bc8fcbc4df9fc4c27ac65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DotDumper - An Automatic Unpacker And Logger For DotNet Framework Targeting Files

An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022. The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. The trials and tribulations to get...

CVE-2020-36567

A flaw was found in gin. This issue occurs when the default Formatter for the Logger middleware LoggerConfig.Formatter, which is included in the Default engine, allows attackers to inject arbitrary log entries by manipulating the request path...

GHSA-6VM3-JJ99-7229 Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines

Gin is a HTTP web framework written in Go Golang. Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

CVE-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

DEBIAN-CVE-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

CVE-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

Input validation

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

UBUNTU-CVE-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines...

CVE-2020-36567

CVE-2020-36567 affects the Gin Web Framework (github.com/gin-gonic/gin) in Go. The vulnerability is caused by unsanitized input in the default logger, reported to exist before v1.6.0, which could allow remote attackers to inject arbitrary log lines. The issue is a log-injection-style risk rather ...