activity log project activity log - vulnerabilities and exploits

(subscribe to this query)

CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.

Activity Log Project Activity Log

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be ini...

Activity Log Project Activity Log -

This Activity Log WordPress plugin prior to 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an malicious user to manipulate its value. This may be used to hide the source of malicious traffic.

Activity Log Project Activity Log

1 Github repository

includes/specials/SpecialChangePassword.php in MediaWiki prior to 1.19.14, 1.20.x and 1.21.x prior to 1.21.8, and 1.22.x prior to 1.22.5 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain...

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1150 Github repositories28 Articles

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulne...

Microsoft Windows Vista -Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 -Microsoft Windows Xp -Microsoft Windows Server 2003 -Microsoft Windows Server 2003 R2 Microsoft Windows 7 -

5 EDB exploits2 Metasploit modules171 Github repositories10 Articles

Windows Print Spooler Remote Code Execution Vulnerability

Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 R2 Microsoft Windows 10 1607 Microsoft Windows 8.1 -Microsoft Windows Server 2016 -Microsoft Windows Server 2008 -Microsoft Windows 7 -Microsoft Windows Rt 8.1 -Microsoft Windows Server 2012 -Microsoft Windows 10 -Microsoft Windows Server 2019 -Microsoft Windows 10 1809 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 10 20h2 Microsoft Windows 10 21h1

133 Github repositories4 Articles

<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install p...

Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 R2 Microsoft Windows 8.1 -Microsoft Windows Server 2008 -Microsoft Windows 7 -Microsoft Windows Rt 8.1 -Microsoft Windows Server 2012 -Microsoft Windows Server 2019 Microsoft Windows Server 20h2 Microsoft Windows 10 1809 Microsoft Windows 10 20h2 Microsoft Windows 10 1507 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows Server 2022 Microsoft Windows 11 21h2 Microsoft Windows 10 21h2 Microsoft Windows 11 22h2 Microsoft Windows 10 22h2

107 Github repositories6 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook