EUVD-2021-0024

Malware in sbrugna...

EUVD-2020-0249

Malware in sbrugna...

EUVD-2020-26490

Malware in sbrugna...

EUVD-2004-1507

Malware in sbrugna...

EUVD-2008-1926

Malware in sbrugna...

EUVD-2018-13139

Malware in sbrugna...

EUVD-2003-1571

Malware in sbrugna...

EUVD-2017-9986

Malware in sbrugna...

EUVD-2019-16894

Malware in sbrugna...

EUVD-2018-8231

Malware in sbrugna...

EUVD-2018-10552

Malware in sbrugna...

EUVD-2008-3582

Malware in sbrugna...

EUVD-2010-2462

Malware in sbrugna...

EUVD-2020-27411

Malware in sbrugna...

EUVD-2009-2819

Malware in sbrugna...

EUVD-2025-32855

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

PT-2025-41008

Name of the Vulnerable Software and Affected Versions CubeAPM version nightly-2025-08-01-1 Description The software allows unauthenticated attackers to inject arbitrary log entries into production systems. This is possible through the /api/logs/insert/elasticsearch/ bulk API endpoint, which accep...

CubeAPM 安全漏洞

CubeAPM is a code development tool from CubeAPM, Inc. A security vulnerability exists in the CubeAPM nightly-2025-08-01-1 release that originates from an unauthenticated attacker being able to inject arbitrary log entries via the /api/logs/insert/elasticsearch/bulk endpoint, which could lead to l...