JPCERTCC/LogonTracer

JPCERTCC/LogonTracer

GitHubGitHub
GitHubgithub.com
Releases21
Frequency5 months 1 day
Last Release
Stars3.2K
Investigate malicious Windows logon by visualizing and analyzing Windows event log
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2026-33566NVD↗
< 2.0.0——

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.

CVE-2026-33277NVD↗
< 2.0.0——

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.

CVE-2018-16165NVD↗
<= 1.2.0—4.3 MEDIUM

Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2018-16166NVD↗
<= 1.2.0—6.8 MEDIUM

LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

CVE-2018-16167NVD↗
<= 1.2.0—10 HIGH

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVE-2018-16168NVD↗
<= 1.2.0—7.5 HIGH

LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.