CVE-2026-106499 Backstage: Secret-derived values may be exposed in scaffolder task logs

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose secret-derived values in Scaffolder task logs. Deployments that configure sensitive scaffolder.defaultEnvironment.secrets and allow an attacker to create or...

EUVD-2026-93867

Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...

Sensitive Data Leakage

Snowflake drivers are vulnerable to Insertion of Sensitive Data Leakage. The vulnerability is due to sensitive data such as authentication tokens, encryption keys, pre-signed cloud-storage URLs, and SAML assertions being written to diagnostic logs, which allows an attacker with read access to the...

evtx-baseline

evtx-baseline 샘플 소프트웨어 설치 및 기본 사용자 상호작용이 포함된 예시 정상 소프트웨어Goodware EVTX 로그를 호스팅하는 저장소입니다. 기부 win10-client.tgz - @phantinuss 제공 win11-client.tgz - @frack113 제공 win7-x86.tgz - @pH-T 제공 win2022-evtx.tgz - @Neo23x0 제공 win2022-ad.tgz - @frack113 제공 win2022-0-20348-azure.tgz - @Neo23x0 제공...

third-thoughts

Третьи мысли Исследовательский проект Lightless Labs, изучающий поведение ИИ-агентов в масштабе с помощью междисциплинарного анализа корпусов проще говоря, бросаем всё на стену и смотрим, что прилипнет. Названо в честь концепции Тиффани Болит из Плоского мира: первые мысли агенты думают, вторые...

[SECURITY] Fedora 45 Update: ocaml-logs-0.10.0-10.fc45

Logs provides a logging infrastructure for OCaml. Logging is performed on sources whose reporting level can be set independently. The log message report is decoupled from logging and is handled by a reporter. A few optional log reporters are distributed with the base library and the API lets you...

PT-2026-107301

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package allows sensitive information exposure within scaffolder task logs. An authenticated user with permissions to create and read scaffolder tasks can...

PT-2026-107296

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package may expose secret-derived values within Scaffolder task logs. This occurs in deployments where sensitive scaffolder.defaultEnvironment.secrets are...

CVE-2026-106123: Replicating Malicious Code (Virus or Worm)

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load includes the raw uri value in wrapped exceptions when AMQP URI parsing fails. Because the URI may contain a plaintext usernam...

Vaultwarden -- Multiple vulnerabilities

The Vaultwarden project reports: Organization member revocation GHSA-69q9-v8p6-xvx3 High, 8.1 Two-factor authentication GHSA-7jg8-8m5x-6j9r Medium, 6.8 Organization invitations GHSA-v576-3wvq-xh3c Medium, 6.8 Attachments GHSA-q5x6-grh5-fqgc Medium, 6.5 Organization event logs GHSA-64mc-4p6f-r7x9...

Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

EUVD-2026-72672

Snowflake drivers writes sensitive information to logs...

NPM: Snowflake drivers writes sensitive information to logs

NPM: Snowflake drivers writes sensitive information to logs vulnerability discovered by ? in WordPress Npm snowflake-sdk versions 3.3.0...

CVE-2021-40223

CVE-2021-40223 Приложение : Rittal CMC PU III Web management Устройства : CMC PU III 7030.000 Версия ПО : V3.11.002 Версия оборудования : V3.00 Тип атаки : Хранимый XSS Решение : Обновите ПО до версии V3.17.10 или новее Краткое описание : Веб-приложение не очищает пользовательский ввод в диалоге...

CVE-2026-55726

CVE-2026-55726: 공개적으로 나열 가능한 Azure Blob Storage 컨테이너 디바이스 로그 권고 필드| 값 ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 Medium 벡터 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 벡터 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CWE| CWE-497 승인되지...

masq

Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...

CVE-2026-105636

The project management tool Plane is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 1.4.0 . The flaw exists in the webhook delivery task within apps/api/plane/bgtasks/webhook_task.py, where requests.post() is called without setting allow_redirects=False. While the applicati...

CVE-2022-47966_checker

CVE-2022-47966checker Быстрый и грязный PowerShell-скрипт для поиска IOCs уязвимости CVE-2022-47966 в ManageEngine. Скрипт анализирует запросы в HTTP-журналах доступа ME. Если обнаружен характерный SAML-запрос, скрипт пытается декодировать и извлечь полезную нагрузку атакующего. Результаты...

EUVD-2026-92448

Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys and further escalate their privileges. This issue is fixed in 1.4.0...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move the cfglogverbose check before calling lpfcdmpdbg In an attempt to log message 0126 using LOGTRACEEVENT, the following hard lockup occurred, causing the system to hang. Call Trace: rawspinlockirqsave+0x32/0x40...