3137 matches found
CVE-2026-79631 WPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files
The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthenticated users to download customer order details and opt-in form submissions when logging is enabled...
CVE-2026-79631
The WPFunnels WordPress plugin (versions before 3.13.0 ) fails to restrict access to log files it writes to a predictable path under the public uploads directory. When logging is enabled, unauthenticated users can download these files, exposing customer order details and opt-in form submissions (...
usbrip
usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...
Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48164 info: name: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information...
Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48166 info: name: Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure author: ritikchaddha...
pwnspoof
pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...
CVE-2020-29666
CVE-2020-29666 Listado de directorios Descripción sugerida En Lan ATMService M3 ATM Monitoring System 6.1.0, debido a una vulnerabilidad de listado de directorios, un atacante remoto puede ver archivos de registro, ubicados en /websocket/logs/, que contienen los valores de cookies de un usuario y...
CVE-2026-9736
IBM Netezza Software versions 11.3.0.3 through Interim Fix 002 are affected by a log injection vulnerability caused by improper neutralization of special elements when written to log files. An unauthorized, unauthenticated network user can inject data into log messages, resulting in a low impact ...
EUVD-2026-70744
IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...
CVE-2019-19653
CVE-2019-19653 Divulgación de información en Chevereto Core = 3.13.5. Los archivos de registro del importador masivo están disponibles para que cualquiera los vea y se pueden enumerar fácilmente root@kitploit: /app/importer/jobs/9/process.txt /app/importer/jobs/9/errors.txt...
Milesight Routers - Information Disclosure
A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...
CVE-2026-19880
A flaw was found in Logback-classic. This path-traversal vulnerability allows a remote attacker to create and append log files outside the intended directory. This occurs because an unsanitized discriminator value, influenced by the attacker for example, via an HTTP header, is used in a file path...
CVE-2026-40463
WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...
EUVD-2026-68372
WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...
CVE-2026-40463 An Insufficient Role-based Access Control Vulnerability in WaveSuite
WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...
CVE-2026-40463
WaveSuite (Nokia) is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. An authenticated low-privilege user can load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser, resulting in a CVSS 3.1 score...
CVE-2020-17519
CVE-2020-17519 Strumento di Traversal dei Log Uno strumento Python che utilizza una tecnica di directory traversal per richiedere file di log da un URL di destinazione. Mostra l'avanzamento in tempo reale, supporta la configurazione del proxy e, opzionalmente, salva le risposte valide...
CVE-2026-82181
Medical Practice Management System developed by Le-yan contains a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information by viewing a victim's browser history or log files , as sensitive data is exposed directly in the URL. The vulnerability is rate...
EUVD-2026-60543
Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...