Search Vulnerabilities

The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that str...

Improper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows allows Log Injection-Tampe...

Log Injection through HTTP Request Paths in Splunk SOAR

Roxy-WI: EscapedString validator skips its '..' block when stripping (root cause for several path-traversal/RCE vectors)

Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action

morgan vulnerable to Log Forging via unneutralized control characters in :remote-user

OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages

Aap-mcp-server: aap mcp server: log injection allows social engineering attacks via unsanitized input

Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility

IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .

Log Pollution - Control Characters Not Escaped

InvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log Poisoning

Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Keycloak-server: sensitive headers shown in the http access logs

Insufficient escaping of unicode characters in query log

cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust

Unauthenticated Log Injection in Splunk Enterprise

IBM Concert Improper Log Neutralization

Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning

Multiple Vulnerabilities in IBM Concert Software.