proftpd-CVE-2026-42167-analysis

CVE-2026-42167 — ProFTPD modsql SQL 인젝션 / 인증 우회 / RCE CVE-2026-42167 에 대한 독립적 재현, 코드 수준의 근본 원인 분석, 그리고 솔직한 노출 분석입니다. 이는 ZeroPath Research가 공개하고 ProFTPD 1.3.9a / 1.3.10rc1에서 수정된 ProFTPD modsql 로깅 파이프라인의 isescapedtext 우회 취약점입니다. 2026-04-29, macOS / Apple Silicon의 Docker에서 엔드투엔드로 빌드 및 검증되었습니다. TL;DR...

journalpump Information Disclosure Vulnerability

journalpump is an Aiven open source daemon that fetches log messages from Journald and pumps them to a given output. An information disclosure vulnerability exists in Journalpump versions prior to 2.5.0, which stems from logging the configuration of a service integration into the provided logging...

PT-2023-31804 · Unknown · Journalpump

Name of the Vulnerable Software and Affected Versions: journalpump versions prior to 2.5.0 Description: A logging issue was found in journalpump, where it logs the configuration of a service integration in plaintext to the supplied logging pipeline. This includes credential information contained ...