CVE-2022-20278

In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Information disclosure

In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20278

In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20278

CVE-2022-20278 affects Android 13, in Accounts, due to insufficient log filtering that could write sensitive data to the system log. This enables local information disclosure with system privileges, no user interaction required. The issue is addressed in Android 13 security fixes; devices with pa...

CLSA-2022-1654710004 Fixed CVE-2022-24903 in rsyslog

CVE-2022-24903: fix heap-based overflow in TCP syslog server...

Frida-Ios-Hook - A Tool That Helps You Easy Trace Classes, Functions, And Modify The Return Values Of Methods On iOS Platform

A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform.  For Android platform: frida-android-hook  For Intercept Api was encrypted on iOS application: frida-ios-interceprt-api Env OS Support OS |...

GHSA-PH84-VG7Q-FQQ8 Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log...

Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log...

Jenkins Amazon EC2 Plugin leaked beginning of private key in system log

Jenkins Amazon EC2 Plugin printed a log message that contained the beginning of the private key to the Jenkins system log. The log message no longer includes the beginning of the private key...

GHSA-W7FV-7J46-WWRV Jenkins Amazon EC2 Plugin leaked beginning of private key in system log

Jenkins Amazon EC2 Plugin printed a log message that contained the beginning of the private key to the Jenkins system log. The log message no longer includes the beginning of the private key...

WordPress Wbcom Designs – WordPress System Log plugin <= 1.0.5 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability

Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress Wbcom Designs – WordPress System Log plugin versions = 1.0.5. Solution Deactivate and delete. This plugin has been closed as of March 9, 2022 and is not available for download. This...

Information disclosure

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs...

CVE-2022-0725

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs...

WordPress WP System Log plugin <= 1.0.22 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP System Log plugin versions = 1.0.22. Solution Update the WordPress WP System Log plugin to the latest available version at least 1.0.23...

WordPress WP System Log plugin <= 1.0.22 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP System Log plugin versions = 1.0.22. Solution Update the WordPress WP System Log plugin to the latest available version at least 1.0.23...

GHSA-PJ4J-287J-F742 Cross-site Scripting in Contao

Contao before 4.5.7 has XSS in the system log...

Cross-site Scripting in Contao

Contao before 4.5.7 has XSS in the system log...

CVE-2021-20159

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injection as root by supplying a malformed parameter...

CVE-2021-20159

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injection as root by supplying a malformed parameter...

CVE-2021-24756

The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs...