CVE-2014-7248: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script or HTML by triggering a crafted entry in a log file...

Event tracking: Belkin router Belkin router）0day overflow vulnerability analysis-vulnerability warning-the black bar safety net

Vulnerability summary Security researcher Marco Vaz in Belkin n750 the model router found a serious vulnerability that can allow an attacker on the victim's device to get Root access permissions i.e. administrator privileges, the vulnerability of the main attacks is the router's Web...

CVE-2014-8735

The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file...

Information disclosure

The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file...

CVE-2014-8735

The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file...

CVE-2014-8735

The Drupal Bad Behavior module (versions 6.x-2.x prior to 6.x-2.2216 and 7.x-2.x prior to 7.x-2.2216) allows information disclosure by logging usernames and passwords. This occurs because remote authenticated users with the "administer bad behavior" permission can read the module’s logs to obtain...

CVE-2014-8735: Exposure of Sensitive Information to an Unauthorized Actor

The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file...

PT-2014-8697

Name of the Vulnerable Software and Affected Versions Bad Behavior module versions 6.x-2.x through 6.x-2.2215 Bad Behavior module versions 7.x-2.x through 7.x-2.2215 Description The issue allows remote authenticated users with the administer bad behavior permission to obtain sensitive information...

Trove: potential leak of passwords into log files

The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...

Trove: potential leak of passwords into log files

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log...

PT-2014-5070

Name of the Vulnerable Software and Affected Versions IBM SONAS and System Storage Storwize V7000 Unified aka V7000U versions 1.3.x through 1.4.x before 1.4.3.4 Description The issue allows local users to obtain sensitive information by reading the audit log file, where the chkauth password is...

PT-2014-4197

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server versions 5.x before 5.0.4 MR7 BlackBerry Enterprise Service versions 10.x before 10.2.2 Description The issue allows local users to obtain sensitive information by reading the exception log file, as cleartext...

SAMHAIN v3.1.2 - File Integrity Checker / Host-Based Intrusion Detection System

The Samhain host-based intrusion detection system HIDS provides file integrity checking and log file monitoring/analysis , as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes. Samhain been designed to monitor multiple hosts with potentially...

OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)

The unpacker::redirectstdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite...

CVE-2014-1317

iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to obtain sensitive information by reading this file...

CVE-2014-1317: Exposure of Sensitive Information to an Unauthorized Actor

iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to obtain sensitive information by reading this file...

Alkacon OpenCMS 7.0.3 - logfileViewSettings.jsp filePath.0 Parameter Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/28152/info Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied inpu...

HP-UX 10.20 registrar Local Arbitrary File Read Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1919/info The registrar service that ships with version 10.20 possibly others of HP's HP-UX operating system contains a vulnerability that may allow a local user to read any file on the hosts filesystem. The service which...

04webserver 1.42 Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/11652/info Multiple remote vulnerabilities reportedly affect 04WebServer. These issues are due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage these issues to carry out...

tmux '-S' Option Incorrect SetGID Privilege Escalation Vulnerability

No description provided by source. --------------------------------------- | Team ph0x90bic proudly presents | | tmux -S 1.3/1.4 local utmp exploit | --------------------------------------- Exploit Title: tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability Date: 11.04.2011...