Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

Nagios-Log-Server-2.1.7-持久性跨站脚本 在 Nagios Log Server 2.1.7 中存在一个存储型跨站脚本（XSS）漏洞，攻击者可利用该漏洞对打开恶意构造链接或第三方网页的用户执行恶意操作。 Nagios Log Server 2.1.7 及更早版本受这些漏洞影响。 CVE-2020-25385 https://vulners.com/cve/CVE-2020-25385 PoC-1 要利用该漏洞，可向 '/nagioslogserver/configure/createsnapshot' 发送 POST 请求，通过操纵请求体中的...

Vulnerability of the create_snapshot() function (fs/btrfs/ioctl.c) in the Btrfs file system of Linux kernels, allowing attackers to escalate their privileges

The vulnerability of the createsnapshot function fs/btrfs/ioctl.c in the Btrfs file system of Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Cross site scripting

Nagios Log Server 2.1.7 contains a cross-site scripting XSS vulnerability in /nagioslogserver/configure/createsnapshot through the snapshotname parameter, which may impact users who open a maliciously crafted link or third-party web page...