Lucene search
+L

100 matches found

Kitploit
Kitploit
•added 2026/09/28 7:14 a.m.•10 views

Xenotix-Python-Keylogger

Windows용 Xenotix Python 키로거 중요: 프로젝트 개발 및 지원이 중단되었습니다 사용법: xenotixpythonlogger.py mode optional 모드: local: 로그를 파일 keylogs.txt에 저장합니다 remote: 로그를 Google Form으로 전송합니다. 스크립트에서 Form URL과 Field Name을 지정해야 합니다. email: 로그를 이메일로 전송합니다. SERVER,PORT,USERNAME,PASSWORD,TO를 지정해야 합니다. ftp: 로그 파일을 FTP 계정에 업로드합니...

6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/29 6:12 a.m.•25 views

Malicious code in openai-agents-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768ddf82a7644f1678a27f3037c8a3fc4fae5f00b6181d6507a49892d20a7fda On npm install, scripts/postinstall.js automatically reads a broad set of installer-side identity and cloud-configuration files — /.gitconfig and the...

5.9AI score
SaveExploits0References26
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/19 9:50 p.m.•24 views

Malicious code in silly-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57b518b6dcdb16913e105cd371fe81d367a85f81599d4468819bbe77ccb68b8 The package's advertised logging API debug/info/warn/error/critical unconditionally POSTs every log payload — message, level, category, and source — ...

5.3AI score
SaveExploits0References3
OSV
OSV
•added 2026/05/19 9:50 p.m.•26 views

MAL-2026-4767 Malicious code in silly-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57b518b6dcdb16913e105cd371fe81d367a85f81599d4468819bbe77ccb68b8 The package's advertised logging API debug/info/warn/error/critical unconditionally POSTs every log payload — message, level, category, and source — ...

5.3AI score
SaveExploits0References3
CVE
CVE
•added 2026/03/11 12:00 a.m.•186 views

CVE-2025-67038

Summary: CVE-2025-67038 affects Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module concatenates the username into a shell command used for logging on authentication failures, allowing injection of arbitrary OS commands with root privileges. Multiple sources (NVD, Red Hat, CISA KEV, CNNVD) describe ...

9.8CVSS6.8AI score0.1926EPSS
SaveIn wildExploits1References4Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2021-21248

Malware in sbrugna...

7.5CVSS7.5AI score0.00933EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-0013

Malware in sbrugna...

5.3CVSS5.7AI score0.0545EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-13234

Malware in sbrugna...

7.5CVSS6.7AI score0.01822EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2018-18450

Malware in sbrugna...

9.8CVSS9.5AI score0.03233EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-12154

Malware in sbrugna...

9.3CVSS8.6AI score0.03411EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-12690

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00877EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/05/23 12:00 a.m.•13 views

The vulnerability of the Remote Logging function of the ctrlX OS allows a perpetrator to execute arbitrary commands.

The vulnerability of the Remote Logging function in the ctrlX OS operating system exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a special HTTP request...

9CVSS6AI score0.00877EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:41 p.m.•18 views

CVE-2021-35936

If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...

5.3CVSS7.1AI score0.0545EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:49 a.m.•25 views

CVE-2017-17675

BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker to hijack the system logs. This data can include user names and HTTP data...

5.3CVSS7AI score0.00867EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Receive Remote rsyslog Messages Only on A Specified Log Host

By default, rsyslog does not listen on log messages from a remote system. Log message listening via TCP is performed in a similar way to log message listening via UDP, both requiring rsyslog to load a module, that is, the imtcp.so module and the imudp.so module respectively. The TCP/UDP port to b...

7AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/02 12:09 p.m.•21 views

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request...

8.8CVSS7.5AI score0.00877EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/30 12:15 p.m.•20 views

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request...

8.8CVSS0.00877EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/30 11:47 a.m.•35 views

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request...

8.8CVSS0.00877EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/30 11:47 a.m.•68 views

CVE-2025-24351

The CVE-2025-24351 entry affects the ctrlX OS web application’s “Remote Logging” functionality. A remote authenticated (low-privileged) attacker can execute arbitrary OS commands in the context of user “root” via a crafted HTTP request. Reports consistently describe this as a root-level command e...

8.8CVSS8.8AI score0.00877EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/30 11:47 a.m.•9 views

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request...

8.8CVSS7.6AI score0.00877EPSS
SaveExploits0References1
Rows per page
Query Builder