geoip-attack-map

First and Foremost I do not have much time in my life right now to maintain this project. I undertook this challenge as a means to learn JavaScript, and to improve upon the Python I already knew. I'm sure there are several things I could have done differently in my implementation, and I won't be...

EDRaser

EDRaser Usage Guide EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

disclosures

Раскрытия Это репозиторий, в котором документируются проблемы безопасности, с которыми я столкнулся. Клиент Citrix для Linux раскрывает учётные данные в syslog Небезопасное создание временного ICA-файла в клиенте Citrix для Linux CVE-2023-24486...

CVE-2020-35488

J'ai trouvé une vulnérabilité dans le produit : nxlog-ce2.10.2150. J'ai testé mon PoC uniquement sur Linux Debian 10 et Windows Windows Server 2016. 1 Description : Portée : NXLOG Community Edition 2.10.2150 Type de bug : CWE-502, Désérialisation de données non fiables...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903: практическая лабораторная работа Автор: Andrew Beshay Mousa Практическая лабораторная работа, демонстрирующая уязвимость переполнения буфера в куче в rsyslog. Практическая среда для воспроизведения и изучения уязвимости переполнения буфера в куче в rsyslog CVE-2022-24903 через...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

D-Link DIR-3040 1.13B03 - Information Disclosure

D-Link DIR-3040 1.13B03 is susceptible to information disclosure in the Syslog functionality. A specially crafted HTTP network request can lead to the disclosure of sensitive information. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory α = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md CTT-Vsyslog-Vortex Temporal Resonance Exploit f...

RS4LOGJ-CVE-2021-44228

RS4LOGJ-CVE-2021-44228 Уязвимость Apache Log4j - CVE-2021-44228 инструкции для Remote Syslog: Remote Syslog использует модуль Elasticsearch для сохранения журналов. Затронутые продукты: RSv2 RSE RSX RSC не затронут. Проверка: Проверьте версию: curl -XGET 'http://localhost:9200' Вывод: "number" :...

AlmaLinux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

CVE-2026-59310

CVE-2026-59310 More echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2020-23593

CVE-2020-23593 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allow an unauthenticated, remote attacker to conduct a cross site...

CVE-2026-93402

A flaw was found in rsyslog. When using the imdtls input module configured for name or fingerprint authentication, permitted-peer identity checks are not enforced after a successful DTLS handshake. A remote attacker possessing a valid certificate signed by the listener's trusted Certificate...

CVE-2022-24654

CVE-2022-24654 PoC de CVE-2022-24654 - Firmware INTELBRAS ATA 200 74.19.10.21 Cross-Site Scripting stockée authentifiée Étapes pour reproduire : 1. Connectez-vous à l'équipement via votre navigateur web 2. Allez dans Gestion Syslog 3. Dans le champ "Adresse du serveur", injectez la charge utile...

CVE-2022-38725

CVE-2022-38725 CVE-2022-38725 est une vulnérabilité de déni de service non authentifiée dans syslog-ng versions antérieures à 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Étapes pour reproduire 1. Tirez une...

CVE-2026-92905

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

CVE-2026-92905 Denial of Service Vulnerability

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

EUVD-2026-85824

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

CVE-2026-92905

ZohoCorp ManageEngine EventLog Analyzer and Log360 versions prior to build 13071 are susceptible to a Denial of Service (DoS) vulnerability. The root cause is the software's inability to properly handle malformed syslog packets , which allows an attacker to crash the log collector . The provided ...