EUVD-2026-93462

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-93460

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-61411

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-61411

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-61411

Dell Container Storage Modules versions prior to 1.18.0 are vulnerable to an Insertion of Sensitive Information into Log File vulnerability (CWE-532). A low-privileged attacker with remote access could exploit this to cause Information disclosure . The affected software is used to integrate Dell ...

CVE-2021-44228

🚨 CVE-2021-44228 — “Log4Shell” Apache Log4j 2 中的一个关键远程代码执行漏洞，广泛被称为 Log4Shell 。 📖 目录 概述 技术细节 严重性与 CVSS 受影响版本 利用与影响 现实世界影响 检测 缓解与修复 总结 🔎 概述 CVE-2021-44228 是 :contentReferenceoaicite:0index=0 版本 2.x （2.15.0 之前）中的一个关键 RCE 漏洞，于 2021 年 12 月被发现。 它允许未认证的远程攻击者通过向被 Log4j...

CVE-2025-27591

Below - 本地权限提升 CVE-2025-27591 Below .log 符号链接到任何 root 拥有的文件，例如 /etc/passwd。 当使用 sudo 执行 below snapshot 时，它会强制将日志文件的模式设置为 0666 并写入其中——即使它是一个符号链接。 这允许注入一个无密码的 root 特权用户，从而导致获得完全的 root shell 访问权限。 使用方法 git clone https://github.com/rvizx/CVE-2025-27591 cd CVE-2025-27591 chmod +x exploit.sh ./exploit....

CVE-2024-2053

通过日志投毒实现LFI到RCE的利用 用于CVE-2024-2053 Artica Proxy的Python3利用程序 📝 描述 此Python3脚本利用本地文件包含（LFI）漏洞，通过日志投毒技术实现远程代码执行（RCE）。专为Artica Proxy（CVE-2024-2053）设计，但也适用于其他LFI场景。 ⚡ 功能 多种LFI测试向量（/etc/passwd、/proc/self/environ） 4种不同的PHP载荷变体用于规避 自动部署Webshell 代理支持（Burp/OWASP ZAP） SSL验证开关 详细调试模式 🛠️ 安装 git clone...

redact

redact Elimina contenido similar a credenciales de cadenas de formato libre antes de que lleguen a registros, telemetría o cualquier superficie de terceros Parte deltoolkit Go de phpboyscout — módulos Go pequeños y sin frameworks extraídos de go-tool-base. Documentación: redact.go.phpboyscout.uk...

KasperMeow

Bypass de KASLR en Kaspersky arkmon.sys mediante Fuga del Registro de Depuración del Kernel El controlador monitor anti-rootkit de Kaspersky arkmon.sys almacena un registro de depuración del kernel que contiene punteros crudos del kernel. El registro está "cifrado" con XOR 0xCC + ROT13, reversibl...

CVE-2025-27591

CVE-2025-27591 introducción below versiones v0.9.0 son vulnerables a una vulnerabilidad de escalada de privilegios local debido a que el programa crea un archivo de log escribible por todos, en lugar de un archivo de log escribible por todos; el atacante puede reemplazar el archivo de log con un...

PT-2026-107234

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.11 through 3.4.x Description Improper handling of exceptional conditions in the aspnet-request pattern converter allows a sender to suppress the log record of their own request. When reading request parameters,...

PT-2026-107179

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Improper neutralization of null bytes or NUL characters in the EventLogAppender allows a NUL character in logged content to truncate the Windows Event Log record. This results in all...

OSSEC HIDS 4.4.0

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...

Newer and Bigger, but Safer? A Longitudinal Study of the Functionality-Security Gap in LLM-Generated Code

Large Language Models LLMs are widely used to generate code. Although their functional plausibility keeps improving, the generated code often contains security vulnerabilities. The functionality-security gap captures code that passes functional tests but fails security tests. A recent longitudina...

PT-2026-107233

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Improper handling of Unicode encoding in the SmtpPickupDirAppender occurs when the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate. This causes...

SUSE SLES16 Security Update : distribution (SUSE-SU-2026:23990-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23990-1 advisory. - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log...

CVE-2023-4281

CVE编号: CVE-2023-4281 漏洞类型: IP地址欺骗 描述: Activity Log 插件从潜在不可信的头部中获取客户端 IP 地址，攻击者可操纵其值。这可能被用于隐藏恶意流量的来源。 复现步骤: Run the following code in the web browser and note on the backend that the IP address has been faked. await fetch"/wp-login.php", "headers": "content-type":...

EUVD-2026-72672

Snowflake drivers writes sensitive information to logs...

CVE-2026-59310

CVE-2026-59310 More echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...