CVE-2025-53004

creationtimestamp| type| source ---|---|--- 2025-06-30 21:09:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19979 2025-07-01 00:50:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsui5g6k4x2u...

CVE-2025-4601

creationtimestamp| type| source ---|---|--- 2025-06-10 04:29:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17822 2025-06-10 04:31:27+00:00| published-proof-of-concept| Telegram/SuCuNuYYG7YH6LF-PMvjYx2GIDz9A5wanFKy4pWUO100XY8 2025-06-10 04:31:28+00:00| seen|...

CVE-2024-21987

SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter Server user to modify system logging configuration settings...

CVE-2019-8123

An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. The logging feature required for effective monitoring did not contain sufficent data to effectively track...

Time-of-check Time-of-use (TOCTOU) Race Condition

github.com/snowflakedb/gosnowflake is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. The vulnerability is due to insufficient file ownership validation in checking and using the logging configuration file; this allows local attackers with write access to the file or its...

CVE-2025-4156

creationtimestamp| type| source ---|---|--- 2025-05-01 08:14:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14248 2025-05-01 09:55:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo426brmcb2o 2025-05-01 12:19:25+00:00| seen|...

PT-2025-18133 · Snowflake · Libsnowflakeclient

Name of the Vulnerable Software and Affected Versions: libsnowflakeclient versions 0.5.0 through 2.2.0 Description: The issue concerns local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the targ...

CVE-2025-46614

In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

ray vulnerable to Insertion of Sensitive Information into Log File

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

PYSEC-2025-23

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

CVE-2025-24705

creationtimestamp| type| source ---|---|--- 2025-01-24 21:47:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113885526591239017...

TYPO3 13.4.3 (TYPO3-CORE-SA-2025-001)

The version of TYPO3 installed on the remote host is prior to 13.4.3. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2025-001 advisory. - It has been discovered that the Install Tool password has been logged as plaintext in case the password hashing mechanism use...

CVE-2024-12003

creationtimestamp| type| source ---|---|--- 2024-12-06 09:36:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113605199823333797 2024-12-06 10:35:57+00:00| seen| https://t.me/cvedetector/12184...

CVE-2024-11491

creationtimestamp| type| source ---|---|--- 2024-11-20 17:02:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113516356461218025 2024-11-20 18:45:51+00:00| seen| https://t.me/cvedetector/11628...

CVE-2024-9192

creationtimestamp| type| source ---|---|--- 2024-11-16 04:10:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113490671257850281 2024-11-16 06:02:33+00:00| seen| https://t.me/cvedetector/11215...

Information Disclosure

github.com/microsoft/terraform-provider-power-platform is vulnerable to Information Disclosure. The vulnerability is due to improper handling of sensitive data in the logging mechanism, where the clientsecret is not properly masked. This allows an attacker to impersonate the service principal and...

CVE-2023-4911

creationtimestamp| type| source ---|---|--- 2023-10-03 19:26:43+00:00| seen| https://t.me/ctinow/140936 2023-10-03 22:25:32+00:00| seen| https://t.me/cibsecurity/71521 2023-10-04 09:54:27+00:00| published-proof-of-concept| Telegram/DC49U-yyOf0wvALqOLP1PpSKVxWrQUjwJZr2ekYXZeihgw 2023-10-04...

Medium: cups

Issue Overview: A vulnerability was found in CUPS. This issue occurs due to logging data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data immediately before the connection closed, resulting in a use-after-free in cupsdAcceptClient in...

CVE-2023-32439

creationtimestamp| type| source ---|---|--- 2023-06-22 08:20:53+00:00| exploited| https://t.me/ekaspersky/295 2023-06-22 08:23:25+00:00| exploited| https://t.me/kasperskylabru/4014 2023-06-22 16:22:04+00:00| exploited| https://t.me/truesecator/4529 2023-06-23 04:00:00+00:00| seen|...