65 matches found
reversemap
reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...
pwnspoof
pwnSpoof de Punk Security genera archivos de registro falsos realistas para servidores web comunes con escenarios de ataque personalizables. Cada paquete de registros es único y completamente personalizable, lo que lo hace perfecto para generar escenarios CTF y para series de entrenamiento. ¿Pued...
CVE-2022-1388-Exploit
CVE-2022-1388-Exploit 用于 CVE-2022-1388 F5 Big-IP 的测试与利用脚本 masscheck.py 将接收一个文件输入，在不实际利用漏洞的情况下检查主机是否存在漏洞。 检测： 扫描 /mgmt/tm/util/bash 作为端点，该端点可能出现在 Web 服务器日志中。或者，如果您有 F5 设备，请尽快打补丁，受影响版本如下所示，补丁可从 https://support.f5.com/csp/article/K23605346 获取。 受影响版本 BIG-IP 16.1.0 至 16.1.2（已发布补丁） BIG-IP 15.1.0 至...
CVE-2026-21766
The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...
CVE-2026-21766
The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...
CVE-2026-21766 HCL Digital Experience and Digital Experience Compose insufficiently protects credentials
The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...
EUVD-2026-45086
The Grav API plugin getgrav/grav-plugin-api before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route JwtAuthenticator::extractBearerToken fallback. Because tokens are embedded in URLs, they are logged verbatim in web server access logs, leaked via th...
network-intrusion-detector
network-intrusion-detector A Python tool that analyses web se...
2625
LogSentinel – Intelligent Web Log Security Analysis Platform...
RED-V Super Digital Signage System 安全漏洞
RED-V Super Digital Signage System is a digital signage system from RED-V, Italy. A security vulnerability exists in RED-V Super Digital Signage System version 5.1.1, which stems from the presence of an information disclosure vulnerability that could lead to unauthenticated access to sensitive we...
Linux Distros Unpatched Vulnerability : CVE-2025-32916
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form...
EUVD-2011-4770
Malware in sbrugna...
EUVD-2009-2932
Malware in sbrugna...
EUVD-2013-4023
Malware in sbrugna...
EUVD-2001-1533
Malware in sbrugna...
EUVD-2011-1837
Malware in sbrugna...
EUVD-2001-1383
Malware in sbrugna...
EUVD-2015-7827
Malware in sbrugna...