27308 matches found
WordPress plugin WP Log Action 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-17043 · WordPress · Webtoffee Wordpress Backup & Migration
Name of the Vulnerable Software and Affected Versions: WebToffee WordPress Backup & Migration versions 1.5.3 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into log files. Recommendations: For versions 1.5.3 and...
WordPress plugin WordPress Backup & Migration 日志信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A log information disclosur...
PT-2025-17037 · WordPress · Webheadcoder Wp Log Action
Name of the Vulnerable Software and Affected Versions: webheadcoder WP Log Action versions 0.51 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacker...
CVE-2025-32865
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'CreateLog' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write...
DEBIAN-CVE-2025-22116
In the Linux kernel, the following vulnerability has been resolved: idpf: check error for registernetdev on init Current init logic ignores the error code from registernetdev, which will cause WARNON on attempt to unregister it, if there was one, and there is no info for the user that the creatio...
Streamlining detection engineering in security operation centers
Security operations centers SOCs exist to protect organizations from cyberthreats by detecting and responding to attacks in real time. They play a crucial role in preventing security breaches by detecting adversary activity at every stage of an attack, working to minimize damage and enabling an...
Medium: pcs
Issue Overview: Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ext4 attempting to update the superblock even after log destruction, which could lead to undefined behavior...
Medium: pcs
Issue Overview: Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This...
CVE-2025-29471
Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field...
CVE-2025-29471
Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field...
Security Bulletin: Security vulnerabilities have been discovered in IBM Security Verify Bridge (CVE-2024-45673, CVE-2024-45674)
Summary Security vulnerabilities have been addressed in IBM Security Verify Bridge offering. Vulnerability Details CVEID:CVE-2024-45673 DESCRIPTION: IBM Security Verify Bridge stores user credentials in configuration files which can be read by a local user. CWE:CWE-260: Password in Configuration...
Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Log Forging CVE-2024-35150
Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Log Forging CVE-2024-35150. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-35150 DESCRIPTION: IBM Maximo Application Suite - Monitor Component does not...
Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains multiple vulnerabilities (CVE-2024-45296, CVE-2024-8986, CVE-2024-21489)
Summary IBM Security QRadar Log Management AQL Plugin for Grafana contains multiple vulnerabilities. These vulnerabilities have been addressed in the update. Vulnerability Details CVEID:CVE-2024-45296 DESCRIPTION: pillarjs Path-to-RegExp is vulnerable to a denial of service, caused by a regular...
PT-2025-16532 · Nagios · Nagios Log Server
Name of the Vulnerable Software and Affected Versions: Nagios Log Server versions 2024R1.3.1 and earlier Description: A Cross Site Scripting vulnerability in Nagios Log Server allows a remote attacker to execute arbitrary code via a payload into the Email field. This issue can be exploited by...
CVE-2025-29471
CVE-2025-29471 is a stored XSS in Nagios Log Server 2024R1.3.1 and earlier, exploitable via payloads in the Email field that can lead to privilege escalation (admin account creation) when an admin views audit logs. Public PoC/Exploits exist (e.g., ExploitDB, PoC video). Affected versions: 2024R1....
CVE-2025-29471
Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field...
Nagios Log Server 安全漏洞
Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios Corporation. A security vulnerability exists in Nagios Log Server version 2024R1.3.1, which originates from the presence of cross-site scripting in the Email field that could lead to the...
