Search results

bug: import XML text emptiness check trims boolean instead of payload

Status: Open.

#269 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 7, 2026

bug: MariaDB detection uses loose stripos comparison in upgrade advisor

Status: Open.

#270 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 7, 2026

bug: syslog_replace_data executes wrong variable when creating missing table

Status: Open.

#258 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

hardening: remove SQL-concatenated matching in legacy syslog_manage_items batch path

Status: Open.

#255 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

hardening: require POST + CSRF token for purge_syslog_hosts utility action

Status: Open.

#259 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

bug: bound XML import memory usage by limiting payload size and read strategy

Status: Open.

#262 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

hardening: prevent CSV formula injection and malformed CSV output in exports

Status: Open.

#256 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

bug: make syslog move/delete operations transactional to avoid partial state

Status: Open.

#263 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

hardening: remove /bin/sh fallback from alert command execution path

Status: Open.

#257 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

hardening: parameterize domain stripping update in syslog_strip_incoming_domains

Status: Open.

#261 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

hardening: replace eval-based callback execution in syslog autocomplete JS

Status: Open.

#260 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026

bug: partition existence check hardcodes table name 'syslog', breaks syslog_removed and allows race condition

Status: Open.

#254 In Cacti/plugin_syslog;

· somethingwithproof opened on Mar 6, 2026