goaccess

GoAccess これは何ですか？ GoAccessは、nixシステムのターミナルまたはブラウザ上で直接動作する、オープンソースのリアルタイムWebログ解析ツール兼インタラクティブビューアです。システム管理者、DevOpsエンジニア、セキュリティ専門家向けに設計されており、高速で実用的なHTTP統計情報とビジュアルなサーバーレポートを即座に提供します。GoAccessは、Webサーバーログをリアルタイムに解析し、データをターミナルまたはライブHTMLダッシュボードで直接表示するため、トラフィックの監視、異常の検出、問題の迅速なトラブルシューティングが容易になります。 詳細情報:...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Python Web Log Analyzer を使用して、Webサーバーログの分析プロセスを自動化します。この強力なツールは、サーバーログ内のさまざまな種類のサイバー攻撃を識別および検出することで、セキュリティを強化するように設計されています。以下の機能を備え、潜在的な脅威に先手を打ちましょう。 目次 機能 将来の機能 インストール 使い方 貢献 ライセンス 機能 1. 攻撃検出:...

UBUNTU-CVE-2026-55768

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum...

UBUNTU-CVE-2026-54715

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. In version 1.10.2, parsebrowser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Age...

UBUNTU-CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from insufficient enforcement of new policies on the network, which can be exploited by an attacker to obtain potentially sensitive information via web log files...

CVE-2020-36878

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...

EUVD-2020-30826

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...

PT-2025-49272

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...

EUVD-2004-1723

Malware in sbrugna...

EUVD-2010-2462

Malware in sbrugna...

EUVD-2008-4198

Malware in sbrugna...

CVE-2024-47094

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p22, 2.2.0p37, 2.1.0p50 EOL causes remote site secrets to be written to web log files accessible to local site users...

CVE-2024-47094 Logging of sitesecret to automations log

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p22, 2.2.0p37, 2.1.0p50 EOL causes remote site secrets to be written to web log files accessible to local site users...

CVE-2024-47094

CVE-2024-47094 affects Checkmk versions <2.3.0p22, <2.2.0p37, and

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. Checkmk has a security vulnerability that originated when confidential information from a remote site was written to a web log file, causing sensitive information to be disclosed and other security issues...

MAL-2024-10994 Malicious code in people-web-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed2dcda2ead97760a4a4fea82ae78d0ef1760ac562cb4813316164cad4bc942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in people-web-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed2dcda2ead97760a4a4fea82ae78d0ef1760ac562cb4813316164cad4bc942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Sterling B2B Integrator Standard Edition could disclose sensitive information in the HTTP response

Summary In IBM Sterling B2B Integrator's dashboard, many links have CSRF tokens at the end of URLs. An attacker could post something with a link to the B2Bi dashboard somewhere. If a B2Bi user who has the active http session and owns the token clicks the link then the request will be honored sinc...