PT-2025-43411

Name of the Vulnerable Software and Affected Versions OpenBao versions prior to 2.4.2 Description The audit log in OpenBao did not properly redact sensitive fields when subsystems sent byte arrays instead of strings as response parameters. This affected functionalities such as sys/raw with base64...

ROS-20251022-02

Jenkins Automation Server vulnerability is related to a log message injection issue. Exploitation The vulnerability could allow an attacker acting remotely to compromise the target system A vulnerability in the Jenkins Automation Server is related to a vulnerable plugin not checking permissions f...

OpenBao 日志信息泄露漏洞

OpenBao is an OpenBao open source sensitive data management software. A log information disclosure vulnerability exists in OpenBao versions 2.2.0 through 2.4.1, which stems from audit logs that do not properly edit the original HTTP body, which could lead to the disclosure of ACME authentication...

OpenBao 日志信息泄露漏洞

OpenBao is an OpenBao open source sensitive data management software. A log information disclosure vulnerability exists in OpenBao versions prior to 2.4.2, which stems from audit logs that are not properly edited for byte array response parameters, which could lead to sensitive data disclosure...

CVE-2025-48025

In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an improper access control vulnerability related to a log file...

Fortinet FortiDLP Log Information Disclosure Vulnerability

Fortinet FortiDLP is a data leakage prevention software from the American company Fita Fortinet. Fortinet FortiDLP suffers from a log information disclosure vulnerability that originates from the insertion of sensitive information into a log file, which can be exploited by an attacker to cause...

IBM Transformation Extender Advanced Log Message Disclosure Vulnerability

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. IBM Transformation Extender Advanced suffers from a log information disclosure vulnerability that originates from storing sensitive information in ...

EUVD-2025-35102

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...

CVE-2025-61303

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...

EUVD-2025-35076

In Samsung Mobile Processor and Wearable Processor Exynos 980, 1280, 1330, 1380, 1480, 2400, 1580, W920, W930, and W1000, there is an improper access control vulnerability related to a log file...

Information Exposure

Overview @actual-app/sync-server is an actual syncing server Affected versions of this package are vulnerable to Information Exposure via the console.log and console.debug functions, which log sensitive response payloads from external services, including bearer tokens, account numbers, and...

CVE-2025-48025

In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an improper access control vulnerability related to a log file...

Exploit for Deserialization of Untrusted Data in Google Android

Project Documentation Official QQ Group: 745307987 Although P...

MAL-2025-48522 Malicious code in stram-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436c6121e283f5f6356fb575e1569411bd6123e6621dba3acec5df01273b5f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stram-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436c6121e283f5f6356fb575e1569411bd6123e6621dba3acec5df01273b5f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35021

Malicious code in stram-log npm...

Malicious Package

Overview stram-log is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

SAMSUNG多款产品 安全漏洞

SAMSUNG Exynos 980 and others are products of the South Korean company Samsung SAMSUNG.SAMSUNG Exynos 980 is a first 5G integrated Soc product and the world's first A77 architecture processor.SAMSUNG Exynos 1280 is a processor for mobile devices.SAMSUNG Exynos SAMSUNG Exynos 850 is a mobile...

CVE-2025-48025

The CVE-2025-48025 entry concerns Samsung Mobile/Wearable Processors (Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, and W920/W930/W1000). The vulnerability is described as improper access control related to a log file. Connected sources (Red Hat, EUVD, NVD, CVE lists) validate the affected famil...

CVE-2025-61303

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...