859 matches found
EUVD-2020-20029
Malware in sbrugna...
EUVD-2020-12786
Malware in sbrugna...
EUVD-2001-1056
Malware in sbrugna...
EUVD-2020-0249
Malware in sbrugna...
EUVD-2021-0024
Malware in sbrugna...
CVE-2025-57564
CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...
CubeAPM 安全漏洞
CubeAPM is a code development tool from CubeAPM, Inc. A security vulnerability exists in the CubeAPM nightly-2025-08-01-1 release that originates from an unauthenticated attacker being able to inject arbitrary log entries via the /api/logs/insert/elasticsearch/bulk endpoint, which could lead to l...
CVE-2025-57564
CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...
EUVD-2025-32855
CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...
PT-2025-41008
Name of the Vulnerable Software and Affected Versions CubeAPM version nightly-2025-08-01-1 Description The software allows unauthenticated attackers to inject arbitrary log entries into production systems. This is possible through the /api/logs/insert/elasticsearch/ bulk API endpoint, which accep...
CVE-2025-57564
CVE-2025-57564 affects CubeAPM core (nightly-2025-08-01-1). An unauthenticated attacker can inject arbitrary log entries via the /api/logs/insert/elasticsearch/_bulk endpoint due to lack of authentication/input validation, potentially causing log poisoning, false entries, alert obfuscation, and o...
CVE-2025-58580
CVE-2025-58580 affects SICK Enterprise Analytics (and related SICK Analytics products) where an API endpoint allows creation of arbitrary log entries via POST without sufficient input validation. The root cause is insecure input handling, enabling an attacker to create manipulated or diluted logs...
CVE-2025-58580 Injection via log file
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example...
CVE-2025-58580 Injection via log file
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example...
EUVD-2024-54592
Malicious code in bioql PyPI...
EUVD-2022-6134
Malicious code in bioql PyPI...
EUVD-2025-6155
Malicious code in bioql PyPI...
EUVD-2022-7542
Malicious code in bioql PyPI...