Information disclosure

An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted...

CVE-2021-22184

An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted...

CVE-2021-22184

An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted...

CVE-2021-22184

CVE-2021-22184 is an information disclosure issue in GitLab, affecting 12.8 and later where a user with access to server logs could view sensitive data not redacted. According to connected Nessus data, vulnerable ranges include GitLab 12.8 up to 13.6.5 (i.e., 12.8 < 13.6.6), 13.7.0 up to 13.7....

PT-2021-14895 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 12.8 and later Description: An information disclosure issue allowed a user with access to the server logs to see sensitive information that wasn't properly redacted. Recommendations: For GitLab versions 12.8 and later, update ...

GitLab 日志信息泄露漏洞

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An information disclosure vulnerability exists in GitLab. Users with access to server logs can...

CVE-2021-25350

Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to access user information via log...

The vulnerability of the information protection system against unauthorized access in Dallas Lock, related to security errors, allows a malicious individual to print text files without saving information about the printing events.

The vulnerability of the Dallas Lock information protection system against unauthorized access is related to security-related errors. Exploiting this vulnerability allows a malicious actor to print text files without storing information about the printing events...

The vulnerability of the `contrib/pmcisconames/pmcisconames.c` file, a software utility for processing Rsyslog logs, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the contrib/pmcisconames/pmcisconames.c file, a software utility for processing Rsyslog logs, is related to the lack of checks for the presence of message delimiters. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data,...

Information Disclosure

cloud-init is vulnerable to Information Disclosure. When a user specified configuration which would generate random passwords for users, cloud-init causes those passwords to be written to the serial console by emitting them on stderr. In the default configuration, any stdout or stderr emitted by...

SUSE-SU-2021:0906-1 Security update for SUSE Manager Server 4.1

This update fixes the following issues: cobbler: - Fix string replacement for @@xyz@@ - Better performing string replacements grafana-formula: - Set supported to false for unsupported systems bsc1182001 - Add SLES 15 SP3 and openSUSE Leap 15.3 to supported versions mgr-libmod: - Fix 'listmodules'...

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

Code injection

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

CVE-2021-25764

PhpStorm (JetBrains) before 2020.3 is affected: the issue lets source code be written into debug logs (“Source code could be added to debug logs”). The vulnerability affects PhpStorm’s logging path and can lead to information disclosure via logs. The issue is tracked as CVE-2021-25764. Remediatio...

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

Another Golang Crypto Miner On the Loose

There are many crypto mining malware variants infecting systems on the internet. On Friday, March 4, 2021, I noticed an interesting hit in my honeypot logs. The binary it captured stood out, as it was rather large at 4MB. I immediately thought it would be a crypto miner written in the Go language...

CVE-2021-23135

Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14...

CVE-2020-27290

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files...

Information disclosure

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files...