16 matches found
PYSEC-2026-892 OpenStack Oslo utility sensitive information exposure via log files
The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...
CVE-2026-7699
A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is possible to be carried out remotely. The...
CVE-2026-7699
A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is possible to be carried out remotely. The...
EUVD-2026-26837
A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is possible to be carried out remotely. The...
CVE-2026-7699 Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection
A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is possible to be carried out remotely. The...
CVE-2026-7699 Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection
A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is possible to be carried out remotely. The...
CVE-2026-7699
A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is possible to be carried out remotely. The...
CVE-2026-7699
Dromara MaxKey up to 3.5.13 contains the StrUtils.checkSqlInjection vulnerability in StrUtils.java. The issue arises from manipulating the argument filtersfields, enabling remote SQL injection. The exploit is reported as publicly available and the vulnerability has a PROOF-OF-CONCEPT exploit; CVS...
PT-2026-36702
A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is possible to be carried out remotely. The...
Dromara MaxKey injection vulnerability
Dromara MaxKey is an open-source identity and authentication product developed by Dromara. Versions of Dromara MaxKey 3.5.13 and earlier contained a vulnerability due to an SQL injection issue. This vulnerability stemmed from the operation of the StrUtils.checkSqlInjection function in the...
Malicious Package
Overview strutils-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in strutils-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b779503ade21852b913a6c223ddbe8a7f9bc17f95c81dd3f30ccca77ef1816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47209 Malicious code in strutils-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b779503ade21852b913a6c223ddbe8a7f9bc17f95c81dd3f30ccca77ef1816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in strutils-pro
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Trove: potential leak of passwords into log files
The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...
PT-2014-7847
Name of the Vulnerable Software and Affected Versions OpenStack Oslo utility library versions prior to 2013.2.4 OpenStack Oslo utility library versions prior to 2014.1.3 Cinder versions prior to 2013.2.4 Cinder versions prior to 2014.1.3 Nova versions prior to 2013.2.4 Nova versions prior to...