Lucene search
K

11 matches found

Cvelist
Cvelist
added 2026/04/21 9:16 p.m.23 views

CVE-2026-40945 Oxia: Bearer token exposed in debug log messages on authentication failure

Oxia is a metadata store and coordination system. Prior to 0.16.2, when OIDC authentication fails, the full bearer token is logged at DEBUG level in plaintext. If debug logging is enabled in production, JWT tokens are exposed in application logs and any connected log aggregation system. This...

8.7CVSS0.00069EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/17 6:2 p.m.2 views

CVE-2025-33225

NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tamperi...

8.4CVSS7.1AI score0.00111EPSS
Exploits0References1
Snyk
Snyk
added 2025/12/16 6:43 p.m.1 views

UNIX Symbolic Link (Symlink) Following

Overview nvidia-resiliency-ext is a NVIDIA Resiliency Package Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following via the log aggregation. An attacker can gain elevated privileges, execute arbitrary code, cause service disruption, access sensitive information,...

8.6CVSS7.3AI score0.00111EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 6:16 p.m.2 views

CVE-2025-33225

NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tamperi...

8.4CVSS0.00111EPSS
Exploits0References3
OSV
OSV
added 2025/12/16 6:16 p.m.2 views

CVE-2025-33225

NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tamperi...

8.4CVSS5.6AI score0.00111EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/16 5:37 p.m.2 views

EUVD-2025-203813

NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tamperi...

8.4CVSS6.7AI score0.00111EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.2 views

NVIDIA Resiliency Extension 安全漏洞

NVIDIA Resiliency Extension is a Python package from NVIDIA. A security vulnerability exists in NVIDIA Resiliency Extension that originates from predictable log file names in log aggregation and could lead to elevation of privilege, code execution, denial of service, information disclosure, and...

8.4CVSS6.6AI score0.00111EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.3 views

PT-2025-51760

Name of the Vulnerable Software and Affected Versions NVIDIA Resiliency Extension for Linux affected versions not specified Description NVIDIA Resiliency Extension for Linux has an issue in its log aggregation process that allows for predictable log-file names. Exploitation of this issue could le...

8.4CVSS5.4AI score0.00111EPSS
Exploits0References8
Kitploit
Kitploit
added 2024/01/18 11:30 a.m.23 views

FalconHound - A Blue Team Multi-Tool. It Allows You To Utilize And Enhance The Power Of Blo odHound In A More Automated Fashion

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool. One of the challenging aspects of BloodHound is that it is a snapshot in time...

6.5AI score
Exploits0References12
Carbon Black Blog
Carbon Black Blog
added 2018/11/13 6:9 p.m.58 views

Cb Customer Spotlight Series: Q&A with Integral’s Sean McFeely

Featuring Sean McFeely, Sr. Information Analyst at Valvoline’s Integral Defense This year at Cb Connect 2018, we had our first ever Developer Day to recognize our vibrant partner and developer ecosystem. We had an amazing group of 100 developers attend, culminating in a hackathon. Sean McFeely, S...

Exploits0
Kitploit
Kitploit
added 2013/09/17 2:6 a.m.30 views

[OS X Auditor] free Mac OS X computer forensics tool

OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and deprecated system and third party's startup items the users' agents the user...

6.7AI score
Exploits0References1
Rows per page
Query Builder