disclosures

Раскрытия Это репозиторий, в котором документируются проблемы безопасности, с которыми я столкнулся. Клиент Citrix для Linux раскрывает учётные данные в syslog Небезопасное создание временного ICA-файла в клиенте Citrix для Linux CVE-2023-24486...

CVE-2020-35488

J'ai trouvé une vulnérabilité dans le produit : nxlog-ce2.10.2150. J'ai testé mon PoC uniquement sur Linux Debian 10 et Windows Windows Server 2016. 1 Description : Portée : NXLOG Community Edition 2.10.2150 Type de bug : CWE-502, Désérialisation de données non fiables...

geoip-attack-map

En premier lieu Je n'ai pas beaucoup de temps dans ma vie en ce moment pour maintenir ce projet. J'ai entrepris ce défi comme un moyen d'apprendre JavaScript et d'améliorer le Python que je connaissais déjà. Je suis sûr qu'il y a plusieurs choses que j'aurais pu faire différemment dans mon...

EDRaser

EDRaser Guide d'utilisation EDRaser est un outil puissant pour supprimer à distance les journaux d'accès, les journaux d'événements Windows, les bases de données et autres fichiers sur des machines distantes. Il propose deux modes de fonctionnement : automatisé et manuel. Mode automatisé En mode...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903: практическая лабораторная работа Автор: Andrew Beshay Mousa Практическая лабораторная работа, демонстрирующая уязвимость переполнения буфера в куче в rsyslog. Практическая среда для воспроизведения и изучения уязвимости переполнения буфера в куче в rsyslog CVE-2022-24903 через...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

D-Link DIR-3040 1.13B03 - Information Disclosure

D-Link DIR-3040 1.13B03 is susceptible to information disclosure in the Syslog functionality. A specially crafted HTTP network request can lead to the disclosure of sensitive information. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal эксплуатация переполнения кучи с использованием Convergent Time Theory α = 0.0302011. 33-слойный временной heap spray + фазово-синхронизированный триггер для надежного локального повышения привилегий. README.md CTT-Vsyslog-Vorte...

RS4LOGJ-CVE-2021-44228

RS4LOGJ-CVE-2021-44228 Уязвимость Apache Log4j - CVE-2021-44228 инструкции для Remote Syslog: Remote Syslog использует модуль Elasticsearch для сохранения журналов. Затронутые продукты: RSv2 RSE RSX RSC не затронут. Проверка: Проверьте версию: curl -XGET 'http://localhost:9200' Вывод: "number" :...

AlmaLinux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

CVE-2026-59310

CVE-2026-59310 More echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2020-23593

CVE-2020-23593 OPTILINK E-PON "МОДЕЛЬ: OP-XT71000N" С "ВЕРСИЕЙ АППАРАТУРЫ: V2.2"; И "ВЕРСИЯ ПРОШИВКИ: OPV3.3.1-191028" Обнаруженная уязвимость в "OPTILINK OP-XT71000N Версия аппаратуры: V2.2, Версия прошивки: OPV3.3.1-191028" позволяет неаутентифицированному удаленному злоумышленнику провести ата...

CVE-2026-93402

A flaw was found in rsyslog. When using the imdtls input module configured for name or fingerprint authentication, permitted-peer identity checks are not enforced after a successful DTLS handshake. A remote attacker possessing a valid certificate signed by the listener's trusted Certificate...

CVE-2022-24654

CVE-2022-24654 PoC de CVE-2022-24654 - Firmware INTELBRAS ATA 200 74.19.10.21 Cross-Site Scripting stockée authentifiée Étapes pour reproduire : 1. Connectez-vous à l'équipement via votre navigateur web 2. Allez dans Gestion Syslog 3. Dans le champ "Adresse du serveur", injectez la charge utile...

CVE-2022-38725

CVE-2022-38725 CVE-2022-38725 est une vulnérabilité de déni de service non authentifiée dans syslog-ng versions antérieures à 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Étapes pour reproduire 1. Tirez une...

CVE-2026-92905

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

CVE-2026-92905 Denial of Service Vulnerability

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

EUVD-2026-85824

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...

CVE-2026-92905

ZohoCorp ManageEngine EventLog Analyzer and Log360 versions prior to build 13071 are susceptible to a Denial of Service (DoS) vulnerability. The root cause is the software's inability to properly handle malformed syslog packets , which allows an attacker to crash the log collector . The provided ...