audit

audit OS X 用監査環境設定ペインとログリーダー OS X には、OpenBSM に基づく監査システムが組み込まれています。このシステムはコマンドラインで設定および構成され、やや難解な構文を持ちます。この問題に対処するため、私はオプションを設定するためのシステム環境設定ペインと、バイナリログを読み取って検索するためのログリーダーを作成しました。詳細については、OS X で man audit を参照してください。 この環境設定ペインは、監査設定ファイルを通常の場所（/etc/security）に作成し、後での配布や個別設定に備えたファイル作成を支援します。 スクリーンショット...

EnableWindowsLogSettings

Yamato Security 的 Windows 事件日志配置指南（面向 DFIR 与威胁狩猎） English | 日本語 这是又一份关于正确配置和监控 Windows 事件日志的指南，重点强调对 sigma 规则的日志记录。 本文仍在不断完善中，请定期回来查看更新。 TLDR 使用 Windows 默认审核设置时，只能使用约 1020% 的 sigma 检测规则。 即使已启用 Windows 日志，默认情况下日志的最大大小也只有 120 MB，因此证据很有可能很快被覆盖。 使用 YamatoSecurityConfigureWinEventLogs.bat 或 WELA Windo...

CVE-2026-50644

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

EUVD-2026-42576

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

CVE-2026-50644: Improper Neutralization of Special Elements used in an SQL Command

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parametersall rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

PT-2026-56774

SOPlanning is vulnerable to SQL injection in the audit retention configuration. An attacker holding parameters all rights can inject SQL commands into the audit configuration form which is then saved. The execution is triggered when the audit functionality is accessed by the attacker or another...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus version 8110 and prior versions, which stems from vulnerability to authenticated SQL injection attacks in a file audit...

Cross-Site Request Forgery (CSRF) in livehelperchat

A CSRF issue is found in the audit configuration under settings. It was found that no CSRF token validation is getting done on the server-side. If we remove the CSRF token and keep the CSRF token field empty, the action is getting performed...

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

Description A CSRF issue is found in the audit configuration under settings. It was found that no CSRF token validation is getting done on the server-side. If we remove the CSRF token and keep the CSRF token field empty, the action is getting performed. Proof of Concept Request POST...

Opmantek Open-AudIT Injection Vulnerability

Opmantek Open-AudIT is an open source network discovery and auditing program from Opmantek USA. The program intelligently scans networks and network devices and provides status reports. Opmantek Open-AudIT suffers from an injection vulnerability. An attacker can exploit this vulnerability to inje...