Cross site scripting

Cross-site Scripting XSS vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms...

CVE-2023-0828 Stored Cross Site Scripting in syslog section

Cross-site Scripting XSS vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms...

CVE-2023-0828

CVE-2023-0828 is a Cross-site Scripting (XSS) vulnerability in the Syslog section of Pandora FMS that can cause a user’s cookie value to be transferred to an attacker’s server. Affected: Pandora FMS version 7.67 (7.67) and earlier on all platforms. Root cause: XSS in the Syslog UI. Impact: creden...

CVE-2023-0828 Stored Cross Site Scripting in syslog section

Cross-site Scripting XSS vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms...

PT-2023-16553 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS version 7.67 and prior versions Description: A Cross-site Scripting XSS issue in the Syslog Section of Pandora FMS allows an attacker to transfer a user's cookie value to the attacker's server. Recommendations: For Pandora FMS...

Important Photon OS Security Update - PHSA-2023-5.0-0093

Updates of 'redis', 'syslog-ng', 'openvswitch', 'apache-tomcat', 'python3' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0093

Updates of 'python3', 'redis', 'openvswitch', 'apache-tomcat', 'syslog-ng' packages of Photon OS have been released...

[NetScaler-Syslog] HA Secondary node Cannot Transmit Syslog Messages in TCP

NetScaler supports report syslog messages to an external syslog server. But in HA deployment, you may observe the issue that: HA Secondary node doesn't send syslog messages while Primary is good if "Transport Type" is TCP. Configuring it to UDP has no issue...

syslog configuration on NetScaler only sends var/log/ns.log to outside syslog server.

...

SonicWALL GMS Virtual Appliance Syslog Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SonicWALL GMS Virtual Appliance. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 2.021 that stems from a stored cross-site scripting XSS vulnerability discovered in the syslog viewer feature. The vulnerability...

Exploit for Use of Externally-Controlled Format String in Asus Rt-Ac86U_Firmware

CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/t...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.6.2.6)

The version of AOS installed on the remote host is prior to 6.6.2.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.6.2.6 advisory. - Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in...

CVE-2023-36924

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could...

CVE-2023-36924

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could...

Design/Logic Flaw

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could...

CVE-2023-36924 Log Injection vulnerability in SAP ERP Defense Forces and Public Security

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could...

CVE-2023-36924

CVE-2023-36924 affects SAP ERP Defense Forces and Public Security, versions 600–807. The root cause is improper handling of log output allowing an authenticated admin to write arbitrary data to the syslog file, potentially altering all syslog data and compromising application integrity. Affected ...

CVE-2023-36924 Log Injection vulnerability in SAP ERP Defense Forces and Public Security

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could...

PT-2023-4139 · Sap · Sap Erp Defense Forces/Public Security

Name of the Vulnerable Software and Affected Versions: SAP ERP Defense Forces and Public Security versions 600 through 807 Description: The issue is related to improper handling of log output, which can be exploited by a remote attacker to overwrite arbitrary files. When using a specific function...