CVE-2026-108622: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any authenticated user to delete audit log entries. Low-privileged attackers can obtain log ids from the unguarded /sys/log/list endpoint and delete chosen syslog records to...

PT-2026-109883

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the SysLogController delete handler, allowing any authenticated user to delete audit log entries. Low-privileged attackers can retrieve log identifiers from the...

PT-2026-109884

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the deleteBatch handler of the SysLogController. This issue allows any authenticated user, including those with low privileges, to delete system audit log entries. B...

GHSA-9Q47-3CM2-2RP8 pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header

Summary pyLoad determines the "client IP" used for its rate-limiting decorator and for its security/audit logging by reading the client-supplied X-Forwarded-For XFF HTTP header and taking the leftmost value. No trusted-proxy configuration exists the Cheroot WSGI server faces clients directly, and...

CVE-2026-107783

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...

CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...

CVE-2026-107783

AWS Tools for PowerShell versions prior to 5.0.306 are vulnerable to the insertion of sensitive information into log files. This flaw (associated with CWE-532 ) may allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remed...

CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...

EUVD-2026-95896

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...

CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...

CVE-2026-79363

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...

WordPress SendPress Newsletters plugin <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure vulnerability

Unauthenticated Newsletter Sending Log Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin SendPress Newsletters versions = 1.26.1.20...

CVE-2026-92990 SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token

The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses...

CVE-2026-92990

The SendPress Newsletters WordPress plugin affects versions through 1.26.1.20 . The vulnerability stems from a hardcoded token used to protect a logging endpoint, which is identical across all site installations instead of being a unique per-site secret. This flaw allows unauthenticated users to ...

rip_raw

Rip Raw Rip Raw es una pequeña herramienta para analizar la memoria de sistemas Linux comprometidos. Su propósito es similar al de Bulk Extractor, pero está enfocada particularmente en extraer registros del sistema logs de volcados de memoria de sistemas Linux. Esto permite analizar sistemas sin...

CVE-2026-79363: Improper Neutralization of Input During Web Page Generation

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

CVE-2026-79363

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

CVE-2026-107783: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...

PT-2026-108962

Name of the Vulnerable Software and Affected Versions AWS Tools for PowerShell versions prior to 5.0.306 Description Sensitive information is inserted into log files, which may allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log...