9435 matches found
PYSEC-2021-107
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...
CTF-All-In-One
This repository is an offensive tool for CTF Capture The Flag competitions, specifically targeting Linux systems. The primary vulnerability class is not explicitly stated, but based on the content, it appears to be focused on binary exploitation Pwn. The tool is designed to be used in a CTF...
CVE-2021-22115: CAPI logs service broker credentials | Cloud Foundry
Severity Critical Vendor Cloud Foundry Foundation Description Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned ite...
Call Center Provider Experiences Major Data Leak
By Habiba Rashid The exposed data was being updated in realtime with new logs while 1.48 million robocall logs were accessed by researchers initially. This is a post from HackRead.com Read the original post: Call Center Provider Experiences Major Data Leak...
GitLab Information Disclosure Vulnerability (CNVD-2021-26067)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An information disclosure vulnerability exists in GitLab. Users with access to server logs can...
CVE-2021-22184
An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted...
CVE-2021-22184
An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted...
Information disclosure
An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted...
CVE-2021-22184
An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted...
CVE-2021-22184
CVE-2021-22184 is an information disclosure issue in GitLab, affecting 12.8 and later where a user with access to server logs could view sensitive data not redacted. According to connected Nessus data, vulnerable ranges include GitLab 12.8 up to 13.6.5 (i.e., 12.8 < 13.6.6), 13.7.0 up to 13.7....
PT-2021-14895 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 12.8 and later Description: An information disclosure issue allowed a user with access to the server logs to see sensitive information that wasn't properly redacted. Recommendations: For GitLab versions 12.8 and later, update ...
GitLab 日志信息泄露漏洞
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An information disclosure vulnerability exists in GitLab. Users with access to server logs can...
CVE-2021-25350
Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to access user information via log...
The vulnerability of the information protection system against unauthorized access in Dallas Lock, related to security errors, allows a malicious individual to print text files without saving information about the printing events.
The vulnerability of the Dallas Lock information protection system against unauthorized access is related to security-related errors. Exploiting this vulnerability allows a malicious actor to print text files without storing information about the printing events...
The vulnerability of the `contrib/pmcisconames/pmcisconames.c` file, a software utility for processing Rsyslog logs, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the contrib/pmcisconames/pmcisconames.c file, a software utility for processing Rsyslog logs, is related to the lack of checks for the presence of message delimiters. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data,...
Information Disclosure
cloud-init is vulnerable to Information Disclosure. When a user specified configuration which would generate random passwords for users, cloud-init causes those passwords to be written to the serial console by emitting them on stderr. In the default configuration, any stdout or stderr emitted by...
SUSE-SU-2021:0906-1 Security update for SUSE Manager Server 4.1
This update fixes the following issues: cobbler: - Fix string replacement for @@xyz@@ - Better performing string replacements grafana-formula: - Set supported to false for unsupported systems bsc1182001 - Add SLES 15 SP3 and openSUSE Leap 15.3 to supported versions mgr-libmod: - Fix 'listmodules'...
CVE-2021-25764
In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...
