Log Injection

pyload-ng is vulnerable to Log Injection. The vulnerability is due to improper input sanitization due to failure to filter user-supplied data in the /json/addpackage API, allowing attackers with package addition permissions to inject arbitrary messages into application logs...

PT-2025-33108 · Centreon · Web

Name of the Vulnerable Software and Affected Versions: Centreon web versions 23.10.0 through 23.10.26 Centreon web versions 24.04.0 through 24.04.16 Centreon web versions 24.10.0 through 24.10.9 Description: The web application is susceptible to SQL Injection due to improper neutralization of...

CVE-2025-24520

Insertion of sensitive information into log file for some IntelR Local Manageability Service software before version 2514.7.16.0 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-24520

Insertion of sensitive information into log file for some IntelR Local Manageability Service software before version 2514.7.16.0 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-24520

Insertion of sensitive information into log file for some IntelR Local Manageability Service software before version 2514.7.16.0 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-3831

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties...

CVE-2025-3831

CVE-2025-3831 affects Check Point Harmony SASE agent. The root cause was a shared SFTP key embedded in the software with read/list permissions, granting broader access than intended to log files uploaded during troubleshooting. This could allow unauthorized parties to access logs (potentially inc...

CVE-2025-3831 Exposed SFTP server

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties...

PT-2025-32673 · Check Point · Harmony Sase Agent

Name of the Vulnerable Software and Affected Versions: Harmony SASE agent affected versions not specified Description: Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties. Recommendations: At the moment, there is no information abou...

Intel® Local Manageability Service Advisory

Summary: A potential security vulnerability in the Intel® Local Manageability Service Intel® LMS may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24520 Description: Insertion of sensitive...

Linux Distros Unpatched Vulnerability : CVE-2022-3697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ansible in the amazon.aws collection when using the towercallback parameter from the amazon.aws.ec2instance module. This flaw allows an...

CVE-2025-8864

Shared Access Signature token is not masked in the backup configuration response and is also exposed in the ybbackup logs...

CVE-2025-8864

Shared Access Signature token is not masked in the backup configuration response and is also exposed in the ybbackup logs...

CVE-2025-8864

CVE-2025-8864 affects YugabyteDB: a Shared Access Signature (SAS) token is exposed in backup config responses and in yb_backup logs. The issue impacts confidentiality and is rated CVSS v4.0 (MEDIUM, Base 6.8) with ADJACENT attack vector, HIGH privileges required, no user interaction. Affected com...

CVE-2025-8864

Shared Access Signature token is not masked in the backup configuration response and is also exposed in the ybbackup logs...

Hackers Leak 9GB of Data from Alleged North Korean Hacker’s Computer

Hackers release 9GB of stolen files from the computer of an alleged North Korean hacker, revealing tools, logs,…...

Linux Distros Unpatched Vulnerability : CVE-2021-20178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the...

YugabyteDB 安全漏洞

YugabyteDB is a high-performance transactional distributed SQL database for cloud-native applications from Yugabyte USA. A security vulnerability exists in YugabyteDB that stems from the exposure of shared access signature tokens in backup configuration responses and ybbackup logs...

Microsoft Windows - Storage QoS Filter Driver Checker

Titles: Microsoft Windows - Storage QoS Filter Driver Checker Author: nu11secur1ty Date: 08/04/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/software-download/windows11 Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49730 Description This PowerShell...

PT-2025-32546 · Yb Backup · Yb Backup

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A Shared Access Signature token is not masked in the backup configuration response and is exposed in the yb backup logs. Recommendations: At the moment, there is no information about a newer versio...