Lucene search
+L

92 matches found

Kitploit
Kitploit
added 2026/09/07 7:13 a.m.5 views

Xenotix-Python-Keylogger

Xenotix Python Keylogger for Windows IMPORTANT: PROJECT DEVELOPMENT AND SUPPORT IS DISCONTINUED usage: xenotixpythonlogger.py mode optional mode: local: store the logs in a file keylogs.txt remote: send the logs to a Google Form. You must specify the Form URL and Field Name in the script. email:...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/29 6:12 a.m.21 views

Malicious code in openai-agents-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768ddf82a7644f1678a27f3037c8a3fc4fae5f00b6181d6507a49892d20a7fda On npm install, scripts/postinstall.js automatically reads a broad set of installer-side identity and cloud-configuration files — /.gitconfig and the...

5.9AI score
SaveExploits0References26
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 9:50 p.m.21 views

Malicious code in silly-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57b518b6dcdb16913e105cd371fe81d367a85f81599d4468819bbe77ccb68b8 The package's advertised logging API debug/info/warn/error/critical unconditionally POSTs every log payload — message, level, category, and source — ...

5.3AI score
SaveExploits0References3
OSV
OSV
added 2026/05/19 9:50 p.m.22 views

MAL-2026-4767 Malicious code in silly-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57b518b6dcdb16913e105cd371fe81d367a85f81599d4468819bbe77ccb68b8 The package's advertised logging API debug/info/warn/error/critical unconditionally POSTs every log payload — message, level, category, and source — ...

5.3AI score
SaveExploits0References3
CVE
CVE
added 2026/03/11 12:00 a.m.173 views

CVE-2025-67038

Summary: CVE-2025-67038 affects Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module concatenates the username into a shell command used for logging on authentication failures, allowing injection of arbitrary OS commands with root privileges. Multiple sources (NVD, Red Hat, CISA KEV, CNNVD) describe ...

9.8CVSS5.9AI score0.1926EPSS
SaveIn wildExploits1References4Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-21248

Malware in sbrugna...

7.5CVSS7.5AI score0.00933EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-0013

Malware in sbrugna...

5.3CVSS5.7AI score0.04022EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-13234

Malware in sbrugna...

7.5CVSS6.7AI score0.01822EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2017-12154

Malware in sbrugna...

9.3CVSS8.6AI score0.03411EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-18450

Malware in sbrugna...

9.8CVSS9.5AI score0.03233EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-12690

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00841EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.12 views

The vulnerability of the Remote Logging function of the ctrlX OS allows a perpetrator to execute arbitrary commands.

The vulnerability of the Remote Logging function in the ctrlX OS operating system exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a special HTTP request...

9CVSS6AI score0.00841EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 6:41 p.m.17 views

CVE-2021-35936

If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...

5.3CVSS7.1AI score0.04022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:49 a.m.23 views

CVE-2017-17675

BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data...

5.3CVSS7AI score0.00867EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/05/07 12:00 a.m.6 views

Receive Remote rsyslog Messages Only on A Specified Log Host

By default, rsyslog does not listen on log messages from a remote system. Log message listening via TCP is performed in a similar way to log message listening via UDP, both requiring rsyslog to load a module, that is, the imtcp.so module and the imudp.so module respectively. The TCP/UDP port to b...

7AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/02 12:09 p.m.19 views

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request...

8.8CVSS7.5AI score0.00841EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/30 12:15 p.m.16 views

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request...

8.8CVSS0.00841EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/30 11:47 a.m.63 views

CVE-2025-24351

The CVE-2025-24351 entry affects the ctrlX OS web application’s “Remote Logging” functionality. A remote authenticated (low-privileged) attacker can execute arbitrary OS commands in the context of user “root” via a crafted HTTP request. Reports consistently describe this as a root-level command e...

8.8CVSS8.8AI score0.00841EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/30 11:47 a.m.30 views

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request...

8.8CVSS0.00841EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/30 11:47 a.m.7 views

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request...

8.8CVSS7.6AI score0.00841EPSS
SaveExploits0References1
Rows per page
Query Builder