Information Disclosure

typo3/cms-install is vulnerable to Information Disclosure. The vulnerability is due to an incorrect password hashing mechanism, which causes the install tool password to be logged in plaintext, allowing an attacker to potentially gain access to the password if they can access the logs or system...

CVE-2024-11923

Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub Formerly named Helpsystems One prior to version 1.3...

Fortra Application Hub 日志信息泄露漏洞

Fortra Application Hub is an application center from Fortra. A security vulnerability exists in Fortra Application Hub versions prior to 1.3 that stems from the IAM or CORE service recording credentials in iam log files under certain logging settings, leading to the disclosure of sensitive...

CVE-2024-11923

CVE-2024-11923 describes a data disclosure in Fortra Application Hub (formerly Helpsystems One) where, under certain log settings, the IAM or CORE service logs credentials in the iam logfile prior to version 1.3. Affected component: Fortra Application Hub IAM/CORE logging workflow; issue arises f...

CVE-2024-11923 Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3

Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub Formerly named Helpsystems One prior to version 1.3...

CVE-2025-21399

creationtimestamp| type| source ---|---|--- 2025-01-17 19:23:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113845324949555117 2025-01-17 19:32:11+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113845359780799137 2025-01-17 19:56:48+00:00| seen|...

PT-2025-1715 · Fortra · Fortra Application Hub

Name of the Vulnerable Software and Affected Versions: Fortra Application Hub versions prior to 1.3 Description: The issue concerns the logging of credentials in the iam logfile under certain log settings. This occurs in the IAM or CORE service of Fortra Application Hub. Recommendations: For...

CVE-2025-23510

Cross-Site Request Forgery CSRF vulnerability in Jan Štětina WordPress Logging Service wordpress-logging-service allows Stored XSS.This issue affects WordPress Logging Service: from n/a through = 1.5.4...

CVE-2025-23510 WordPress WordPress Logging Service plugin <= 1.5.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jan Štětina WordPress Logging Service wordpress-logging-service allows Stored XSS.This issue affects WordPress Logging Service: from n/a through = 1.5.4...

CVE-2025-23510

CVE-2025-23510 describes a Cross-Site Request Forgery (CSRF) in the Zaantar WordPress Logging Service plugin that enables Stored XSS. The vulnerability affects WordPress Logging Service from n/a through 1.5.4. Public data lists a CVSS v3.1 base score of 7.1 (HIGH) with Network attack vector, Low ...

CVE-2025-23510 WordPress WordPress Logging Service plugin <= 1.5.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Zaantar WordPress Logging Service allows Stored XSS.This issue affects WordPress Logging Service: from n/a through 1.5.4...

WordPress WordPress Logging Service plugin <= 1.5.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WordPress Logging Service versions = 1.5.4...

tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...

WordPress plugin WordPress Logging Service 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-4915 · WordPress · Wordpress Logging Service

Name of the Vulnerable Software and Affected Versions: WordPress Logging Service versions 1.5.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.6.27

Logging for Red Hat OpenShift - 5.6.27 Logging for Red Hat OpenShift - 5.6.27 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875...

CVE-2024-57014

creationtimestamp| type| source ---|---|--- 2025-01-15 17:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbedcd6n2j 2025-01-15 18:24:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113833769317315493 2025-01-15 19:18:50+00:00| seen|...

Moderate: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.10

Logging for Red Hat OpenShift - 5.9.10 Logging for Red Hat OpenShift - 5.9.10...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.16

Logging for Red Hat OpenShift - 5.8.16 Logging for Red Hat OpenShift - 5.8.16 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875...

CVE-2025-23061

creationtimestamp| type| source ---|---|--- 2025-01-15 04:32:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113830496154420562 2025-01-15 05:11:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1700 2025-01-15 05:48:38+00:00| seen|...