RS4LOGJ-CVE-2021-44228

RS4LOGJ-CVE-2021-44228 Apache Log4j भेद्यता - रिमोट सिसलॉग के लिए CVE-2021-44228 निर्देश: रिमोट सिसलॉग लॉगिंग सहेजने के लिए Elasticsearch मॉड्यूल का उपयोग करता है। प्रभावित उत्पाद: RSv2 RSE RSX RSC प्रभावित नहीं है। जांच: संस्करण जांचें: root@kitploit: curl -XGET 'http://localhost:9200' आउटपुट:...

CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab

CVE-2022-24903 हैंड्स-ऑन लैब लेखक: Andrew Beshay Mousa rsyslog हीप बफ़र ओवरफ़्लो भेद्यता प्रदर्शित करने वाली एक व्यावहारिक हैंड्स-ऑन लैब। TCP syslog अभिग्रहण में ऑक्टेट-गणना फ़्रेमिंग के माध्यम से rsyslog हीप बफ़र ओवरफ़्लो भेद्यता CVE-2022-24903 को पुनरुत्पादित करने और समझने के लिए एक व्यावहारिक...

disclosures

खुलासे यह एक रिपॉजिटरी है जिसमें मेरे सामने आई सुरक्षा समस्याओं का दस्तावेजीकरण किया गया है। Linux के लिए Citrix क्लाइंट syslog में क्रेडेंशियल लीक करता है Citrix Linux क्लाइंट असुरक्षित अस्थायी ICA फ़ाइल निर्माण CVE-2023-24486...

D-Link DIR-3040 1.13B03 - Information Disclosure

D-Link DIR-3040 1.13B03 is susceptible to information disclosure in the Syslog functionality. A specially crafted HTTP network request can lead to the disclosure of sensitive information. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute...

CVE-2020-35488

Ich habe eine Schwachstelle im Produkt gefunden: nxlog-ce2.10.2150. Ich habe meinen PoC nur unter Linux Debian 10 und Windows Windows Server 2016 getestet. 1 Beschreibung : Scope : NXLOG Community Edition 2.10.2150 Fehlertyp : CWE-502, Deserialisierung nicht vertrauenswürdiger Daten...

EUVD-2026-66825

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

EDRaser

EDRaser Guia de Uso EDRaser é uma ferramenta poderosa para excluir remotamente logs de acesso, logs de eventos do Windows, bancos de dados e outros arquivos em máquinas remotas. Ela oferece dois modos de operação: automático e manual. Modo Automático No modo automático, o EDRaser escaneia a class...

CVE-2022-38725

CVE-2022-38725 CVE-2022-38725 est une vulnérabilité de déni de service non authentifiée dans syslog-ng versions antérieures à 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Étapes pour reproduire 1. Tirez une...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 è un overflow di heap nel buffer di glibc vsysloginternal sfruttato tramite la Convergent Time Theory α = 0.0302011. Uno spray heap temporale a 33 strati con trigger bloccato in fase per un affidabile escalation dei privilegi locali. README.md...

geoip-attack-map

Zuallererst Ich habe derzeit nicht viel Zeit in meinem Leben, um dieses Projekt zu pflegen. Ich habe diese Herausforderung angenommen, um JavaScript zu lernen und das Python, das ich bereits kannte, zu verbessern. Ich bin mir sicher, dass ich einige Dinge in meiner Implementierung hätte anders...

CVE-2022-24654

CVE-2022-24654 PoC di CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Cross Site Scripting persistente autenticato Passaggi per riprodurre: 1. Accedere all'apparecchiatura tramite il browser web 2. Andare su Management Syslog 3. Nel campo "Field Server Address" iniettare il payload...

@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

@logtape/syslog contains two related output-encoding bugs in the structured data formatting code. Both only affect deployments with includeStructuredData: true, which is non-default. 1. Unescaped C0 control characters in structured data values escapeStructuredDataValue in...

EUVD-2026-66563

LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structured data values, and formatStructuredData...

CVE-2026-54511

@logtape/syslog (part of LogTape, a Node.js logging library) contains two related output-encoding bugs in its structured-data formatting, affecting versions prior to 1.3.11 , 2.0.14 , and 2.1.5 when includeStructuredData is set to true (non-default). The escapeStructuredDataValue() function fails...

PT-2026-82353

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Spring Integration 7.1.0 Spring...

CVE-2020-23593

CVE-2020-23593 OPTILINK E-PON "MODEL NO: OP-XT71000N" con "HARDWARE VERSION: V2.2"; e "FIRMWARE VERSION: OPV3.3.1-191028" La vulnerabilità trovata in "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" consente a un attaccante remoto non autenticato di condurre un...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2026-59310

CVE-2026-59310 PoC https://trap.biu.life/intelligence/6a82873feb679015eb4c8a67 root@kitploit: echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 root@kitploit: GET...

CVE-2026-71933

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...