3517 matches found
pwnspoof
pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...
Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48166 info: name: Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure author: ritikchaddha...
Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48164 info: name: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information...
Milesight Routers - Information Disclosure
A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...
CVE-2020-29666
CVE-2020-29666 디렉터리 목록 제안된 설명 Lan ATMService M3 ATM Monitoring System 6.1.0에서 디렉터리 목록 취약점으로 인해 원격 공격자가 /websocket/logs/에 있는 로그 파일을 볼 수 있으며, 해당 파일에는 사용자의 쿠키 값과 미리 정의된 개발자의 쿠키 값이 포함되어 있습니다. 추가 정보 취약점에 대해 공급업체에 서신을 보냈습니다. 취약점 유형 기타 CWE-548: 디렉터리 목록을 통한 정보 노출 제품 공급업체 Lan ATMService LLC...
CVE-2019-19653
CVE-2019-19653 Chevereto 정보 노출 = 3.13.5 Core. 대량 가져오기 프로그램의 로그 파일은 누구나 볼 수 있으며 쉽게 열거될 수 있습니다. /app/importer/jobs/9/process.txt /app/importer/jobs/9/errors.txt...
CVE-2020-17519
CVE-2020-17519 로그 트래버설 도구 타겟 URL에서 디렉토리 트래버설 기법을 사용하여 로그 파일을 요청하는 Python 도구입니다. 실시간 진행 상황을 표시하고, 프록시 구성을 지원하며, 유효한 응답을 선택적으로 저장합니다. 기능 구성 가능한 깊이의 디렉토리 트래버설 디렉토리 트래버설을 위한 설정 가능한 깊이를 사용합니다. 단일 파일 또는 여러 파일 경로 단일 파일 경로 또는 파일에서 여러 경로를 요청할 수 있습니다. 멀티스레딩 지원 여러 스레드를 사용하여 동시에 요청을 실행합니다. 프록시 지원 요청에 대한 프록시를...
usbrip
usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...
AlmaLinux 9.2 [TuxCare] Security Update: cloud-init (ALMALINUX9.2:CLSA-2025:1760025490)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760025490 advisory. - Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed password...
CVE-2026-92872
A flaw was found in Pgpool-II. The application writes sensitive cluster details directly into log files. An authenticated attacker can exploit this issue to view database cluster information, resulting in unauthorized information disclosure. Mitigation Mitigation for this issue is either not...
CVE-2026-93290
The Eufy Omni C20 is affected by a vulnerability involving the use of hard-coded credentials . An attacker who is able to monitor the device's log files could obtain these credentials to gain unauthorized access to sensitive information, such as mapping data . No specific remediation or patch ver...
CVE-2026-93290 Use of Hard-coded Credentials in Eufy Omni C20
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...
CVE-2026-82371
Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch credentials and active session tokens. An attacker with access to system logs or support bundles can leverage exposed...
EUVD-2026-86349
Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch credentials and active session tokens. An attacker with access to system logs or support bundles can leverage exposed...
CVE-2026-82371
Brocade SANnav versions before 3.0.1a are vulnerable to a plaintext exposure of sensitive authentication data within the discovery service log files . This flaw allows individuals with file read access to retrieve administrative switch credentials and active session tokens . An attacker who gains...
CVE-2026-82371 Plaintext exposure of sensitive authentication data in SANnav discovery service log files
Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to retrieve administrative switch credentials and active session tokens. An attacker with access to system logs or support bundles can leverage exposed...
CVE-2026-77825
IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint GET /v1/admin/logs/file. The path confinement check uses str.startswith rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json...
PT-2026-98269
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...
CVE-2026-93290: Use of Hard-coded Credentials
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...