EUVD-2026-108631

When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log configured credentials of proxies during startup. An attacker with access to log files can steal the credentials and use the proxy as the user who configured the proxy...

CVE-2026-115657

The KNIME Analytics Platform (LTS versions before 5.8.4 ) is vulnerable to a sensitive information disclosure flaw when used as an executor in KNIME Server or KNIME Business Hub . During startup, the software logs the configured credentials of proxies, allowing an attacker with access to the log ...

CVE-2026-115657 KNIME Analytics Platform logs credentials of configured proxy when used as an executor

When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log configured credentials of proxies during startup. An attacker with access to log files can steal the credentials and use the proxy as the user who configured the proxy...

audit

audit Audit Preference Pane and Log Reader for OS X OS X has a built in auditing system build into OS X based on OpenBSM. It is configured and setup via the command line, and has some esoteric syntax. To deal with this, I created a system preference pane to configure the options, and a log reader...

ExtendIntel

ExtendIntel This package extends the Intel package to log more fields If the intel file contains the following fields, the data will automatically be added to the intel.log. threatscore verdict verdictsource confidence desc lastseen firstseen url reports campaigns associated category...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2023-50132

CVE-2023-50132 Suggested description Sourcecodester School Visitor Log e-book v1.0 is vulnerable to Cross Site Scripting XSS. Additional Information youtube link: https://youtu.be/W7Oen8rs64 Vulnerability Type Cross Site Scripting XSS Vendor of Product https://www.sourcecodester.com/ Affected...

CVE-2026-54615

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, LogEntryExtraFormatter builds the HTML shown in the "Extra" column of the activity-log table /log and in element history tables. Every branch of LogEntryExtraFormatter::getInternalFormat runs...

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

CVE-2026-54615 Part-DB: Stored XSS / HTML injection in activity-log Extra column via unsanitized CollectionElementDeleted element name (sibling-sanitizer gap)

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, LogEntryExtraFormatter builds the HTML shown in the "Extra" column of the activity-log table /log and in element history tables. Every branch of LogEntryExtraFormatter::getInternalFormat runs...

CVE-2026-54615

The open source inventory management system Part-DB is vulnerable to stored cross-site scripting (XSS) and HTML injection prior to version 2.12.1 . The root cause is a sanitizer gap in LogEntryExtraFormatter::getInternalFormat() where the CollectionElementDeleted branch fails to escape getOldName...

EUVD-2026-108572

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, LogEntryExtraFormatter builds the HTML shown in the "Extra" column of the activity-log table /log and in element history tables. Every branch of LogEntryExtraFormatter::getInternalFormat runs...

Phant0m

Phant0m | Windows Event Log Killer Svchost is essential in the implementation of so-called shared service processes, where a number of services can share a process in order to reduce resource consumption. Grouping multiple services into a single process conserves computing resources, and this...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

sn1per-mcp

Sn1per MCP Server Drive your self-hosted Sn1per from your AI assistant: scoped, audited, for authorized testing. For authorized security testing only. Use the Sn1per MCP Server only against systems you own or are explicitly permitted, in writing, to test, and within the scope of that permission...

Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read

The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, whi...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

kernel: xfs: bounds-check buffer log item's dirty bitmap

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

grapl

Grapl Grapl is a graph-based SIEM platform built by-and-for incident response engineers. NOTICE Grapl has ceased operations as a company. As such, this code is no longer being actively developed, but will remain available in an archived state. Details Grapl leverages graph data structures at its...