disclosures

Disclosures This is a repository documenting security issues I have encountered. Citrix client for Linux leaks credentials to syslog Citrix Linux client insecure temporary ICA file creation CVE-2023-24486...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

D-Link DIR-3040 1.13B03 - Information Disclosure

D-Link DIR-3040 1.13B03 is susceptible to information disclosure in the Syslog functionality. A specially crafted HTTP network request can lead to the disclosure of sensitive information. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute...

EDRaser

EDRaser Guía de uso EDRaser es una herramienta poderosa para eliminar de forma remota registros de acceso, registros de eventos de Windows, bases de datos y otros archivos en máquinas remotas. Ofrece dos modos de operación: automatizado y manual. Modo Automatizado En el modo automatizado, EDRaser...

geoip-attack-map

Primero y ante todo No tengo mucho tiempo en mi vida en este momento para mantener este proyecto. Acepté este desafío como una forma de aprender JavaScript y mejorar el Python que ya conocía. Estoy seguro de que hay varias cosas que podría haber hecho de manera diferente en mi implementación, y n...

CVE-2022-38725

CVE-2022-38725 CVE-2022-38725 is an unauthenticated Denial of Service vulnerability in syslog-ng versions prior to 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Steps to Reproduce 1. Pull a vulnerable docker...

CVE-2026-59310

CVE-2026-59310 More root@kitploit: echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 root@kitploit: GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2020-23593

CVE-2020-23593 OPTILINK E-PON "型号：OP-XT71000N" 以及 "硬件版本：V2.2"; & "固件版本：OPV3.3.1-191028" 在 "OPTILINK OP-XT71000N 硬件版本：V2.2 , 固件版本：OPV3.3.1-191028" 中发现漏洞，该漏洞允许未经身份验证的远程攻击者通过 ' /mgmlogcfg.asp ' 执行跨站请求伪造（CSRF）攻击以启用 syslog 模式。系统将开始记录事件，在 "Syslog -- 配置页面" 上的 'Remote' 模式或 'Both' 模式会记录事件并发送到远程 syslog 服务器...

CVE-2022-24654

CVE-2022-24654 CVE-2022-24654의 PoC - INTELBRAS ATA 200 Firmware 74.19.10.21 인증된 저장형 크로스 사이트 스크립팅 재현 단계: 1. 웹 브라우저를 통해 장비에 로그인합니다. 2. Management Syslog로 이동합니다. 3. "Field Server Address" 필드에 페이로드 "-prompt"XSS"-"를 주입합니다. 4. 저장을 클릭합니다. 5. 익스플로잇!...

CVE-2020-35488

I have found a vulnerability in product: nxlog-ce2.10.2150. I have tested my PoC only on Linux Debian 10 and Windows Windows Server 2016. 1 Description : Scope : NXLOG Community Edition 2.10.2150 Bug Type : CWE-502, Deserialization of Untrusted Data https://cwe.mitre.org/data/definitions/502.html...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 Hands-On Lab Author: Andrew Beshay Mousa A practical hands-on lab demonstrating the rsyslog heap buffer overflow vulnerability. A practical lab environment to reproduce and understand the rsyslog Heap Buffer Overflow vulnerability CVE-2022-24903 via octet-counted framing in TCP...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed CRLF sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-bas...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 Explotación de desbordamiento de búfer en el montón de vsysloginternal de glibc CVE-2023-6246 mediante la Teoría del Tiempo Convergente α = 0.0302011. Rociado de montón temporal de 33 capas + disparo con bloqueo de fase para una escalada de privilegios locales...

RS4LOGJ-CVE-2021-44228

RS4LOGJ-CVE-2021-44228 Apache Log4j vulnerability - CVE-2021-44228 instructions for Remote Syslog: Remote Syslog uses the Elasticsearch module to save logging. Effected products: RSv2 RSE RSX RSC is not effected. Check: Check version: root@kitploit: curl -XGET 'http://localhost:9200' Output:...

VulnCheck KEV: CVE-2025-60698

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub432F60 function in prog.cgi stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvramsafeset"SysLogRemoteIPAddress", .... These values are...

CVE-2026-84192

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP interface descriptions or syslog...

CVE-2026-84192 LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP interface descriptions or syslog...

CVE-2026-84192

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP interface descriptions and syslog program fields without proper escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript that executes when aut...

CVE-2026-84192 LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data

LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sourced data without escaping. An attacker who controls a monitored network device can inject arbitrary JavaScript through SNMP interface descriptions or syslog...