CVE-2026-62184

CVE-2026-62184 affects the OpenWrt luci-app-banip component. The issue is a log-parsing vulnerability in an awk-based parser that always extracts the first IPv4 address from a log line, regardless of its actual field position. An unauthenticated remote attacker can inject an IP address via attack...

CVE-2026-62184 luci-app-banip Log Monitor IP Extraction Bypass

luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...

EUVD-2025-178446

Malicious code in import-log-monitor-rho-function npm...

EUVD-2021-31596

Malicious code in bioql PyPI...

WordPress Error Log Monitor Plugin < 1.7.7 is vulnerable to Cross Site Scripting (XSS)

Software Error Log Monitor Type Plugin Vulnerable versions 1.7.7 Fixed in 1.7.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1ba690e43ba1 Credits Rafie Muhammad Patchstack Requir...

WordPress Error Log Monitor plugin < 1.7.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Error Log Monitor plugin versions 1.7.1. Solution Update the WordPress Error Log Monitor plugin to the latest available version at least 1.7.1...

WordPress Error Log Monitor plugin < 1.7.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Error Log Monitor plugin versions 1.7.1. Solution Update the WordPress Error Log Monitor plugin to the latest available version at least 1.7.1...

CVE-2021-44792

Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information...

CVE-2021-44792

Single Connect does not perform an authorization check when using the "log-monitor" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information...

CVE-2021-44792

CVE-2021-44792 affects Single Connect via the log-monitor module, where an missing authorization check allows a remote attacker to access the logging interface and potentially obtain sensitive information. The NVD entry lists CVSS v3.1 base score 5.3 (Network, Low attack complexity, no privileges...

Kron Single Connect 安全漏洞

Kron Single Connect is a comprehensive Privileged Access Management Pam software suite from Kron Turkey. It is designed to create a flexible, centrally managed and layered defense security architecture against insider threats. A security vulnerability exists in Kron Single Connect, which stems fr...

PT-2022-12233

Name of the Vulnerable Software and Affected Versions Single Connect affected versions not specified Description The issue is related to the lack of an authorization check in the log-monitor module, allowing a remote attacker to access the logging interface and potentially obtain sensitive...

Call Log Monitor - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Call Log Monitor published at the 'play' market has multiple vulnerabilities...

Venafi to Launch Certificate Transparency Log

Three weeks after the first non-Google public log for Certificate Transparency was launched by DigiCert, officials at Venafi said that the company plans to debut its own public CT log. On Jan. 1 Google approved the use of DigiCert’s log, the first CT log that is independent and not operated by...