EUVD-2019-6187

Malware in sbrugna...

EUVD-2001-0891

Malware in sbrugna...

log4jScanner

This is a tool for scanning internal subnets for vulnerable log4j web services. It sends a JNDI payload to each discovered web service on common HTTP/S ports and logs the responding host IP. The tool does not send any exploits to the vulnerable hosts and is designed to be as passive as possible...

CVE-2019-15116

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...

CVE-2005-3176

Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...

CVE-2024-54450

An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record the possibly forged IP address mentioned in that header rather than the real IP address that the user logged in from. This fake IP addres...

go-retryablehttp: url might write sensitive information to log file

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...

FiberHome VDSL2 Modem HG150-Ub 安全漏洞

The FiberHome VDSL2 Modem HG150-Ub is a piece of router equipment from FiberHome. A security vulnerability exists in the FiberHome VDSL2 Modem HG150-UbV3.0 version, which stems from the fact that an administrator's credentials can be submitted in a URL and can be logged, sniffed, and sniffed...

CVE-2019-15116

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...

CVE-2019-15116

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...

Design/Logic Flaw

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...

CVE-2019-15116

CVE-2019-15116 affects the WordPress Easy Digital Downloads plugin prior to version 2.9.16. The vulnerability is a cross-site scripting (XSS) flaw associated with how IP addresses are logged, and multiple sources describe it as stored XSS. Impact is client-side script execution when vulnerable da...

CVE-2019-15116

The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging...

PT-2019-13996 · WordPress · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: easy-digital-downloads plugin versions prior to 2.9.16 Description: The issue is related to cross-site scripting XSS in the context of IP address logging. This means an attacker could potentially inject malicious scripts into the website,...

CVE-2002-2423

CVE-2002-2423 affects Sendmail versions 8.12.0 through 8.12.6. The vulnerability arises because log messages longer than 100 characters are truncated, allowing a remote attacker to prevent the IP address from being logged via a long IDENT response. The connected Red Hat entry and other CVE record...

CVE-2004-1357

The Secure Shell SSH Daemon SSHD in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities...

CVE-2002-2423

Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response...

CVE-2001-0908

CITRIX Metaframe 1.8 logs the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation NAT...

CVE-2001-0908

CITRIX Metaframe 1.8 logs the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation NAT...