1962 matches found
EDRaser
EDRaser Usage Guide EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs...
geoip-attack-map
First and Foremost I do not have much time in my life right now to maintain this project. I undertook this challenge as a means to learn JavaScript, and to improve upon the Python I already knew. I'm sure there are several things I could have done differently in my implementation, and I won't be...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
disclosures
Disclosures This is a repository documenting security issues I have encountered. Citrix client for Linux leaks credentials to syslog Citrix Linux client insecure temporary ICA file creation CVE-2023-24486...
CVE-2026-59310
CVE-2026-59310 More echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...
CVE-2020-23593
CVE-2020-23593 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allow an unauthenticated, remote attacker to conduct a cross site...
Cisco ASA Uncontrolled Resource Consumption (CVE-2018-15399)
A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The...
CVE-2022-24654
CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Management Syslog 3. In the "Field Server Address" inject the payload "-prompt"XSS"-" 4. Click Save 5...
D-Link DIR-3040 1.13B03 - Information Disclosure
D-Link DIR-3040 1.13B03 is susceptible to information disclosure in the Syslog functionality. A specially crafted HTTP network request can lead to the disclosure of sensitive information. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute...
CVE-2022-38725
CVE-2022-38725 CVE-2022-38725 is an unauthenticated Denial of Service vulnerability in syslog-ng versions prior to 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Steps to Reproduce 1. Pull a vulnerable docker...
CVE-2020-35488
I have found a vulnerability in product: nxlog-ce2.10.2150. I have tested my PoC only on Linux Debian 10 and Windows Windows Server 2016. 1 Description : Scope : NXLOG Community Edition 2.10.2150 Bug Type : CWE-502, Deserialization of Untrusted Data https://cwe.mitre.org/data/definitions/502.html...
CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab
CVE-2022-24903 Hands-On Lab Author: Andrew Beshay Mousa A practical hands-on lab demonstrating the rsyslog heap buffer overflow vulnerability. A practical lab environment to reproduce and understand the rsyslog Heap Buffer Overflow vulnerability CVE-2022-24903 via octet-counted framing in TCP...
path-auditor
PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...
CTT-Vsyslog-Vortex-CVE-2023-6246
CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory α = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md CTT-Vsyslog-Vortex Temporal Resonance Exploit f...
RS4LOGJ-CVE-2021-44228
RS4LOGJ-CVE-2021-44228 Apache Log4j vulnerability - CVE-2021-44228 instructions for Remote Syslog: Remote Syslog uses the Elasticsearch module to save logging. Effected products: RSv2 RSE RSX RSC is not effected. Check: Check version: curl -XGET 'http://localhost:9200' Output: "number" : "7.16.2"...
AlmaLinux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...
CVE-2026-93402
A flaw was found in rsyslog. When using the imdtls input module configured for name or fingerprint authentication, permitted-peer identity checks are not enforced after a successful DTLS handshake. A remote attacker possessing a valid certificate signed by the listener's trusted Certificate...
CVE-2026-92905
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...
CVE-2026-92905 Denial of Service Vulnerability
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...
EUVD-2026-85824
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...