macos-UnifiedLogs

macos-unifiedlogs Простая библиотека на Rust, которая помогает анализировать файлы macOS Unified Log. Unified Logs были представлены в macOS 10.12 Sierra, 2016. Частью цели Apple было создание единого формата журналов для всех продуктов Apple. Они существуют на macOS, iOS, watchOS, tvOS. Unified...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext Credentials

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected...

EUVD-2026-95319

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

Honeypot-Logs-CVE-2025-5777

Honeypot-Logs-CVE-2025-5777 Journaux de honeypot CitrixBleed 2 NetScaler...

CVE-2026-107293

A flaw was found in pydantic-ai. An information disclosure vulnerability occurs when OpenTelemetry instrumentation is configured to omit message contents, as retry prompts generated during output validation are still exported to the telemetry backend. A user with read access to telemetry logs can...

CVE-2025-24000-exploit

CVE-2025-24000 — Exploit d'élévation de privilèges Post SMTP Aperçu Ce script exploite CVE-2025-24000 , une vulnérabilité de contrôle d'accès brisé de sévérité élevée dans le plugin WordPress Post SMTP versions ≤ 3.2.0. Il permet à tout utilisateur authentifié avec un compte à faibles privilèges...

CVE-2026-87980

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

CVE-2026-87980 Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

CVE-2026-87980

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable in the UNIX S-TAP component due to the cleartext storage of sensitive information in logs (CWE-532). A local attacker could exploit this to obtain sensitive data. Remediation is available via the IBM Guardium Data Protectio...

c2finder

c2finder Avertissement obligatoire : je ne suis en aucun cas un codeur expert, donc ce script est très simple. Ne comptez pas dessus pour être parfait. Je suis ouvert aux retours ou aux idées d'amélioration, cependant : Description Ce script télécharge la liste maître des C&C depuis Bambenek...

CVE-2026-36341

Уязвимость межсайтового скриптинга XSS в Webkul Krayin CRM HTML-инъекция CVE: CVE-2026-36341 Краткое описание Уязвимость особенно критична, поскольку затрагивает панель администратора. Во многих рабочих процессах CRM менеджеры или администраторы более высокого уровня просматривают действия,...

Security Bulletin: Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection (CVE-2026-87980)

Summary Security vulnerability has been addressed in the UNIX S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-87980 DESCRIPTION: IBM Guardium Data Protection could allow a local attacker to obtain sensitive information due to cleartext storage of...

Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer

CVE-2023-34362 Анализ уязвимости MOVEit Transfer Обзор проекта Этот репозиторий содержит академический технический анализ CVE-2023-34362 — критической уязвимости SQL-инъекции, затрагивающей MOVEit Transfer. Проект подготовлен для CYB625 – Этический хакинг и тестирование на проникновение. Важное...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink Lecture arbitraire de fichiers Portée concernée Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Utilisation du script python3 CVE-2020-17519 --help Affiche l'aide python3...

SMTP WP Plugin Directory Listing

The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access. id: CVE-2020-35234 info: name: SMTP WP Plugin Directory Listing author: PR3R00T severity: high description: The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and i...

VMware Aria Operations for Logs - Unauthenticated Remote Code Execution

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root. id: CVE-2023-20864 info: name: VMware Aria Operations for Logs - Unauthenticated Remo...

Anchor CMS 0.12.3 - Error Log Exposure

Anchor CMS 0.12.3 is susceptible to an error log exposure vulnerability due to an issue in config/error.php. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred. id: CVE-2018-7251 info: name: Anchor CMS 0.12.3 ...

PT-2026-107783

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers ...

Backstage: Secret-derived values may be exposed in scaffolder task logs

Impact Deployments that configure sensitive scaffolder.defaultEnvironment.secrets and allow an attacker to create or modify Scaffolder templates are affected. A template author could cause secret-derived values used during template iteration to be persisted in task logs, exposing those values to...