9435 matches found
Romanian Crypto Mining Infection
While examining my honeypot logs and digging through the newly downloaded binaries last week, I noticed a large compressed file. I figured it would be a crypto miner, typically a tar archive and gzip normally erroneously compressed. I moved the archive over to my test lab and started examining th...
WordPress θ·¨η«θζ¬ζΌζ΄
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WP WordPress plugin DSGVO All in one before 4.0, which stems...
Unspecified Vulnerability in BMC Remedy Mid Tier 9.1SP3
BMC Software BMC Remedy 9.1SP3 is an application from BMC Software, Inc. It provides off-the-shelf IT Information Library ITIL service support functionality. A security vulnerability exists in BMC Remedy Mid Tier 9.1SP3 that originates from an unauthenticated user having access to remote logs,...
CVE-2021-25644
An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect commands to the REST API can result in leaked authentication information being stored in cleartext in the debug.log and info.log files, and is also shown in the UI visible to administrators...
CVE-2017-17675
BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data...
CVE-2017-17675
CVE-2017-17675 affects BMC Remedy Mid Tier 9.1SP3. The issue is log hijacking: remote logging can be accessed by unauthenticated users, enabling attackers to hijack system logs and potentially access usernames and HTTP data. The connected sources confirm affected product/version and the data expo...
CVE-2017-17675
BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data...
BMC Software BMC Remedy 9.1SP3 ζ₯εΏδΏ‘ζ―ζ³ι²ζΌζ΄
BMC Software BMC Remedy 9.1SP3 is an application from BMC Software, Inc. It provides off-the-shelf IT Information Library ITIL service support functionality. A security vulnerability exists in BMC Remedy Mid Tier 9.1SP3 that originates from an unauthenticated user having access to remote logs,...
Mitigate OT security threats with these best practices
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Chris Sistrunk, Technical Manager in...
EulerOS 2.0 SP8 : ceph (EulerOS-SA-2021-1866)
According to the version of the ceph packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr log...
Cross-site Scripting (XSS) - Stored in knadh/listmonk
βοΈ Description Hello, I found stored xss on Logs while creating new campaign works with other stuff not only campaign π΅οΈββοΈ Proof of Concept https://drive.google.com/file/d/1Y5CMQdfzzdWwcCsQ8y85GgWPOilJVOgo/view?usp=sharing sorry for bad quality Payload: asdf" π₯ Impact xss...
DFIR-O365RC - PowerShell Module For Office 365 And Azure AD Log Collection
PowerShell module for Office 365 and Azure AD log collection Module description The DFIR-O365RC PowerShell module is a set of functions that allow the DFIR analyst to collect logs relevant for Office 365 Business Email Compromise investigations. The logs are generated in JSON format and retrieved...
CVE-2021-30183
Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...
Unspecified Vulnerability in JetBrains TeamCity (CNVD-2021-34988)
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in...
CVE-2021-23135
Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14...
CVE-2021-23135 Argo CD leaked secret data into error messages and logs on invalid edits via UI
Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14...
Argo δΏ‘ζ―ζ³ι²ζΌζ΄
Argo is an open source container native workflow engine. A security vulnerability exists in Argo CD. The vulnerability stems from the exposure of system data in the program's Web UI to an unauthorized Control Sphere exploit, which could allow an attacker to leak confidential data leading to leaks...
PT-2021-15388 Β· Argo Cd Β· Argo Cd
Name of the Vulnerable Software and Affected Versions: Argo CD versions 1.8.0 through 1.8.6 Argo CD versions 1.7.0 through 1.7.13 Description: The issue allows an attacker to cause leaked secret data into web UI error messages and logs due to exposure of system data to an unauthorized control...