CVE-2021-40223

CVE-2021-40223 Application : Rittal CMC PU III Web management Périphériques : CMC PU III 7030.000 Révision logicielle : V3.11.002 Révision matérielle : V3.00 Type d'attaque : XSS stocké Solution : Mettre à jour vers la révision logicielle V3.17.10 ou ultérieure Résumé : L'application web ne...

CVE-2026-55726

CVE-2026-55726: Общедоступный для перечисления контейнер Azure Blob Storage журналы устройств Консультация Поле| Значение ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 Средний Вектор 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Вектор 4.0|...

masq

Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...

CVE-2026-105636

The project management tool Plane is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 1.4.0 . The flaw exists in the webhook delivery task within apps/api/plane/bgtasks/webhook_task.py, where requests.post() is called without setting allow_redirects=False. While the applicati...

CVE-2022-47966_checker

CVE-2022-47966checker Script PowerShell rapide et sommaire pour rechercher les IOCs de ManageEngine liés à CVE-2022-47966. Le script analysera les requêtes dans les logs d'accès HTTP de ME. Si une requête SAML caractéristique est trouvée, il tentera de décoder et d'extraire la charge utile de...

EUVD-2026-92448

Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys and further escalate their privileges. This issue is fixed in 1.4.0...

Astra Linux – Vulnerability in Apache2

Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move the cfglogverbose check before calling lpfcdmpdbg In an attempt to log message 0126 using LOGTRACEEVENT, the following hard lockup occurred, causing the system to hang. Call Trace: rawspinlockirqsave+0x32/0x40...

EVTX-ATTACK-SAMPLES

Windows EVTX 샘플 EVTX 예제 200개: 특정 공격 및 사후 악용post-exploitation 기법과 연관된 Windows 이벤트 샘플을 담은 컨테이너입니다. 다음과 같은 용도로 유용할 수 있습니다: EVTX 파싱 기반 탐지 스크립트 테스트 이벤트 로그를 활용한 DFIR 및 위협 헌팅 교육 Windows 및 Sysmon 이벤트 로그를 사용한 탐지 사용 사례 설계 레드팀원이라면 시끄러운noisy 기법 회피/우회 참고: 매핑은 ATT&CK 기법절차 아님 수준에서 수행되었습니다. MITRE 전술에 매핑된 EVTX 콘텐...

CVE-2026-104706

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104806

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2026-104806

The Mitel MiVoice Office 400 System is vulnerable to a path traversal flaw in the web management portal (TCP port 443) within the Maintenance → System Logs functionality. Due to insufficient validation of user-supplied file paths, an attacker with high privileges can traverse the directory struct...

CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

EUVD-2026-92293

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

EUVD-2026-92289

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104706

The Mitel MiVoice Office 400 system is affected by a path traversal vulnerability (CWE-31). This flaw allows an attacker with high privileges to view or download sensitive system files via the portal at https://:8443 specifically through the Administration -> View Logs menu. The vulnerability ...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

Exchange_IOC_Hunter

ExchangeIOCHunter Description : Hunt for IOCs in IIS Logs - CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 Artefacts pris en charge : Adresses IP C2 utilisées pour le scan et l'exploitation Noms de fichiers observés dans les tentatives d'exploitation Exécution de code à distance R...