CVE-2026-121573

The Melapress WP Activity Log (wp-security-audit-log) WordPress plugin is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. This issue exists in versions up to and including 5.6.7 due to the improper neutralization of input during web page generation. An attacker could potentially ...

EUVD-2026-120164

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.7...

CVE-2026-86468

The Apache Airflow CLI contains a vulnerability where secrets are recorded in the audit log in cleartext due to the system masking secrets based on argument position. Specifically, certain command shapes—such as a trailing --description on Variable commands, --conn-extra, and the inline --passwor...

CVE-2026-86468

Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument position, so some supported command shapes leave secrets in cleartext, for example a trailing --description on Variable commands, --conn-extra, and the inline --password of airflow keycloak-auth-manager...

CVE-2026-50204

Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the Log.extra column because the secrets masker matched only on configured sensitive key names. An authenticated low-privilege user with read access to the event-log / audit API — with no prior access to the...

CVE-2026-50204

Apache Airflow is vulnerable to the exposure of Connection and Variable secret values in cleartext within the Log.extra column of the audit log. This occurs because the secrets masker only matched configured sensitive key names. An authenticated low-privilege user with read access to the event-lo...

EUVD-2026-119906

Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the Log.extra column because the secrets masker matched only on configured sensitive key names. An authenticated low-privilege user with read access to the event-log / audit API — with no prior access to the...

EUVD-2026-119901

Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument position, so some supported command shapes leave secrets in cleartext, for example a trailing --description on Variable commands, --conn-extra, and the inline --password of airflow keycloak-auth-manager...

PT-2026-140951

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.7...

Elkeid

Elkeid - Bytedance Cloud Workload Protection Platform English | 简体中文 Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices. With the business...

ALFA

ALFA Automated Audit Log Forensic Analysis for Google Workspace Copyright c 2026 Invictus Incident Response Original authors Greg Charitonos & BertJanCyber maintained by Invictus Incident Response Before you start A note on supported operating systems, ALFA is tested on several Linux distribution...

CVE-2026-17167

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to falsify audit log information due to reliance on untrusted inputs. Information supplied by the client is relied on when recording the source of a request, so audit records could contain inaccurate details...

EUVD-2026-118649

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to falsify audit log information due to reliance on untrusted inputs. Information supplied by the client is relied on when recording the source of a request, so audit records could contain inaccurate details...

CVE-2026-17167

Versions 12.1.0.0 through 12.1.1.2 of IBM API Connect are vulnerable to an issue where a remote authenticated attacker can falsify audit log information. The root cause is the software's reliance on untrusted inputs from the client when recording the source of a request. This allows an attacker t...

DFIR-O365RC

Table of contents: 1. Module description 2. Installation and prerequisites 1. Using Docker 2. Manual Installation 3. Managing the DFIR-O365RC application 1. Creating the application 2. Updating the application 3. Removing the application 4. Permissions and license requirements 5. Functions includ...

CVE-2026-77463

A flaw was found in Remark42. The application trusts client-supplied HTTP forwarding headers to determine the client's IP address without verifying that requests originate from a trusted proxy. A remote attacker can exploit this vulnerability by sending spoofed IP headers, allowing them to bypass...

CVE-2026-105191

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin versions before 1.17.11 is vulnerable to a sensitive data disclosure. The root cause is a missing capability check on an AJAX action that returns the stored before-and-after values of a record change. This flaw al...

CVE-2026-105191 WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users'...

CVE-2026-95769

An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to falsify the client address recorded in audit records...

CVE-2026-95759

Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system...