Code injection

Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secomea GateManager versions prior to 9.7...

What is a VPN and what does data logging by a VPN means?

By Deeba Ahmed A virtual private network or simply VPN is a service that protects your privacy online. This article explains… This is a post from HackRead.com Read the original post: What is a VPN and what does data logging by a VPN means?...

CVE-2022-22291

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...

CVE-2022-22291

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device...

HikPwn

This is an offensive tool for Hikvision devices. The tool, named HikPwn, is a simple scanner written in Python 3.8 that performs basic vulnerability scanning capabilities. It was created by Ananke and is available on GitHub. The tool has several functions and characteristics, including passive an...

CVE-2021-28667

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...

Group Policy Services Policy Processing Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points. An attacker who successfully exploited this vulnerability could overwrite a targeted file that would normally require elevated permissions. To exploit the vulnerability, a...

CVE-2019-9976

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users...

CVE-2019-9976

The CVE-2019-9976 entry documents a vulnerability in the Boa web server used on DASAN H660RM devices running firmware 1.03-0022 where POST data is logged to /tmp/boa-temp. This storage allows logged-in users to read the credentials of administration web interface users, causing a confidentiality ...

CVE-2018-5866

CVE-2018-5866 affects Qualcomm Snapdragon mobile/wear platforms (MDM9206/9607/9650 and various SD/SDA generations). The issue stems from processing logs where data is copied into a buffer pointed to by an untrusted pointer, within Snapdragon Mobile/Snapdragon Wear components. Affected products li...

CVE-2018-0335

A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attacker to view sensitive data. The vulnerability is due to improper logging of authentication data. An attacker could exploit this vulnerability by monitoring...

CVE-2018-1000060

Sensu, Inc. Sensu Core version Before 1.2.0 & before commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b contains a CWE-522 vulnerability in Sensu::Utilities.redactsensitive that can result in sensitive configuration data e.g. passwords may be logged in clear-text. This attack appear to be exploitabl...

Why You Need a Database Audit Trail

Your ability to answer very detailed questions about what’s going on in your organization’s databases can make or break a compliance audit or security investigation. Aside from the obvious need for this information in the event of a breach, it’s also important because government, financial, and...

Privatoria — Best VPN Service for Fast, Anonymous and Secure Browsing

PRIVACY – a bit of an Internet buzzword nowadays. Why? Because the business model of the Internet has now become data collection. If you trust Google, Facebook or other Internet giants to be responsible managers of your data, the ongoing Edward Snowden revelations are making it all clear that thi...

Byzanz GIF Encoding Denial of Service Vulnerability

Byzanz is a program to record animated GIFs. The GIF encoding in Byzanz fails to properly handle Byzanz debug data logging, allowing remote attackers to conduct denial-of-service attacks or execute arbitrary code...

CVE-2009-4490

minihttpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...