The vulnerability of the monitoring panel of the Nagios Log Server software allows a hacker to perform cross-site scripting attacks (XSS).

The vulnerability of the monitoring panel for Nagios Log Server exists because no measures have been taken to protect the structure of the web page when viewing log records. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

EUVD-2023-54238

Malicious code in bioql PyPI...

CVE-2023-22300

An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viewing the logs. This action would also grant the attacker privilege escalation...

PT-2023-18410 · Sauter +1 · Ey-As525F001 With Moduweb +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viewing the log...

CVE-2021-24774

The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues...