65 matches found
CVE-2022-1388-Exploit
CVE-2022-1388-Exploit Test and Exploit Scripts for CVE 2022-1388 F5 Big-IP masscheck.py will take a file input and check the hosts are vulnerable without exploiting them. Detection: Scanning for /mgmt/tm/util/bash as an endpoint, likely to be in web server logs. Or if you have a F5 go patch it, t...
reversemap
reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...
pwnspoof
pwnSpoof de Punk Security genera archivos de registro falsos realistas para servidores web comunes con escenarios de ataque personalizables. Cada paquete de registros es único y completamente personalizable, lo que lo hace perfecto para generar escenarios CTF y para series de entrenamiento. ¿Pued...
CVE-2026-21766
The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...
CVE-2026-21766
The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...
CVE-2026-21766 HCL Digital Experience and Digital Experience Compose insufficiently protects credentials
The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default...
EUVD-2026-45086
The Grav API plugin getgrav/grav-plugin-api before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route JwtAuthenticator::extractBearerToken fallback. Because tokens are embedded in URLs, they are logged verbatim in web server access logs, leaked via th...
network-intrusion-detector
network-intrusion-detector A Python tool that analyses web se...
2625
LogSentinel – Intelligent Web Log Security Analysis Platform...
RED-V Super Digital Signage System 安全漏洞
RED-V Super Digital Signage System is a digital signage system from RED-V, Italy. A security vulnerability exists in RED-V Super Digital Signage System version 5.1.1, which stems from the presence of an information disclosure vulnerability that could lead to unauthenticated access to sensitive we...
Linux Distros Unpatched Vulnerability : CVE-2025-32916
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form...
EUVD-2009-2932
Malware in sbrugna...
EUVD-2011-4770
Malware in sbrugna...
EUVD-2004-0705
Malware in sbrugna...
EUVD-2011-1837
Malware in sbrugna...
EUVD-2001-1383
Malware in sbrugna...
EUVD-2013-4023
Malware in sbrugna...
EUVD-2015-7827
Malware in sbrugna...