Lucene search
K

43 matches found

Nuclei
Nuclei
added 2026/06/16 7:13 a.m.42 views

LogonTracer <=1.2.0 - Remote Command Injection

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. id: CVE-2018-16167 info: name: LogonTracer =1.2.0 - Remote Command Injection author: gy741 severity: critical description: LogonTracer 1.2.0 and earlier allows remote attackers to execu...

10CVSS8.9AI score0.74745EPSS
Exploits3References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:31 p.m.7 views

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS5.8AI score0.00177EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:17 p.m.8 views

CVE-2026-33277

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...

8.8CVSS7.7AI score0.01213EPSS
Exploits0References1
NVD
NVD
added 2026/04/27 12:16 a.m.3 views

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS0.00177EPSS
Exploits0References2
NVD
NVD
added 2026/04/27 12:16 a.m.4 views

CVE-2026-33277

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...

8.8CVSS0.01213EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/27 12:4 a.m.3 views

EUVD-2026-25742

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS5.6AI score0.00177EPSS
Exploits0References2
CVE
CVE
added 2026/04/27 12:4 a.m.7 views

CVE-2026-33566

CVE-2026-33566 is a cypher injection issue in LogonTracer prior to v2.0.0. When specially crafted Windows event log data is loaded, the contents of the database may be altered. The issue is documented across multiple sources (NVD, CVE List, JVN) and is addressed by updating to LogonTracer v2.0.0....

5.1CVSS6.3AI score0.00177EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/27 12:4 a.m.4 views

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS5.2AI score0.00177EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/27 12:3 a.m.3 views

EUVD-2026-25741

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...

8.8CVSS8.3AI score0.01213EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/27 12:3 a.m.3 views

CVE-2026-33277

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...

8.8CVSS5.4AI score0.01213EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/27 12:3 a.m.4 views

CVE-2026-33277

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...

8.8CVSS5.4AI score0.01213EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/27 12:3 a.m.33 views

CVE-2026-33277

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...

8.8CVSS0.01213EPSS
Exploits0References2
CVE
CVE
added 2026/04/27 12:3 a.m.8 views

CVE-2026-33277

CVE-2026-33277 concerns an OS command injection in LogonTracer prior to v2.0.0. A logged-in user can cause arbitrary OS commands to execute due to the vulnerability in how input is processed. Affected software: LogonTracer (before version 2.0.0). The root cause is an input handling flaw that allo...

8.8CVSS8.3AI score0.01213EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.6 views

LogonTracer 安全漏洞

LogonTracer is a visual system log analysis tool developed by the Japanese JPCERT organization. This product can detect malicious login attempts by analyzing Windows Active Directory event logs. Versions of LogonTracer prior to 2.0.0 contained security vulnerabilities; these vulnerabilities were...

5.1CVSS6.2AI score0.00177EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.3 views

PT-2026-35276

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS5.6AI score0.00177EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.3 views

PT-2026-35275

Name of the Vulnerable Software and Affected Versions LogonTracer versions prior to 2.0.0 Description An OS command injection issue allows a logged-in user to execute arbitrary operating system commands. Recommendations Update to version 2.0.0 or later...

8.8CVSS8.4AI score0.01213EPSS
Exploits0References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-8019

Malware in sbrugna...

6.1CVSS6.7AI score0.01118EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-8020

Malware in sbrugna...

8.8CVSS8.8AI score0.01881EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-8022

Malware in sbrugna...

9.8CVSS9.5AI score0.02403EPSS
Exploits0References3
Packet Storm
Packet Storm
added 2021/06/01 12:0 a.m.370 views

LogonTracer 1.2.0 Remote Code Execution

Exploit Title: LogonTracer 1.2.0 - Remote Code Execution Unauthenticated Date: 29/05/2021 Exploit Author: g0ldm45k Vendor Homepage: https://www.jpcert.or.jp/ Software Link: https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.0 Version: 1.2.0 and earlier Tested on: Version 1.2.0 on Debian...

10CVSS0.1AI score0.74745EPSS
Exploits3
Rows per page
Query Builder