ebates.com XSS vulnerability

Vulnerable URL: http://www.ebates.com/help/customercare/whereismyrebate.do Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 518 Google Pagerank| 5 VIP website status:| Yes Check...

Error: "To Use Desktop Lock Feature, Make Sure Receiver is Installed and is Working Fine With Single Signon" While Installing Desktop Lock

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Trying to install and activate Desktop Lock, but cannot get it to install. "To use Desktop Lock...

PT-2015-7236 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco FirePOWER Management Center versions 5.4.1.3, 6.0.0, and 6.0.1 Description: The issue allows remote attackers to obtain potentially sensitive version information by reading an unspecified field. This occurs because the Cisco FirePOWER...

CVE-2015-6411: Exposure of Sensitive Information to an Unauthorized Actor

Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061...

Cisco FirePOWER Management Center Software Version Information Disclosure Vulnerability

A vulnerability in Cisco FirePOWER Management Center could allow an unauthenticated, remote attacker to obtain information about the version of Cisco FirePOWER Management Center software that is running on an affected system. An attacker could use this information to conduct reconnaissance attack...

help-education.org XSS vulnerability

Vulnerable URL: http://www.help-education.org/sponsorshipform.html?firstname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Sysaid Helpdesk Software 14.4.32 b25 - SQL Injection Vulnerability

Exploit for windows platform in category remote exploits Exploit Title: Sysaid Helpdesk Software Unauthenticated SQLi Date: 28.11.2015 Exploit Author: hland Vendor Homepage: https://www.sysaid.com/ Version: v14.4.32 b25 Tested on: Windows 7, Windows 10 Blog post:...

help-me-fix.us XSS vulnerability

Vulnerable URL: http://www.help-me-fix.us/emailsupport.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

helpcenter.onlyoffice.com XSS vulnerability

Vulnerable URL: http://helpcenter.onlyoffice.com/search.aspx?text=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.02.2016 Latest check for patch:| 23.02.2016 19:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2015-07825)

CloudBees Jenkins is the open source continuous integration server. A security vulnerability exists in the sidepanel widget in the CLI command overview and help pages of CloudBees Jenkins 1.638, LTS before 1.625.2, which allows remote attackers to obtain sensitive information by directly requesti...

Information disclosure

The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages...

Social networking site LinkedIn（LinkedIn）repair help at the center of the XSS-vulnerability warning-the black bar safety net

LinkedIn developers in this week and fixed a stored cross site scripting vulnerabilities, a hacker use it in the LinkedIn help forum to spreadXSSworms. Science LinkedIn is committed to global professionals to provide a communication platform, and to help them do more with less, to play Director...

PT-2015-6854

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.638 Jenkins LTS versions prior to 1.625.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to the CLI command overview and help pages. Recommendations For versions...

LinkedIn Cross Site Scripting

LinkedIn social network affected by Persistent Cross-Site Scripting vulnerabilityXSS patched in less than 3 hours ========================= I. VULNERABILITY ------------------------- LinkedIn social network is affected by Persistent Cross-Site Scripting stored XSS vulnerability. II. BACKGROUND...

LinkedIn Fixes Persistent XSS Vulnerability

Developers at LinkedIn fixed a persistent cross site scripting vulnerability in the social network this week that could have been exploited to spread a worm on the service’s help forums. It was a very a quick turnaround for the company according to the researcher, who said LinkedIn fixed the issu...

Duplicate App Icons on Receiver for Windows

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Affected users see multiple stores configured CCA4-UK, CCA4-UK1, CCA4-UK2 and so on. Receiver was...

Microsoft Compiled HTML Help Remote Code Execution

!/usr/bin/php pocEhsan Noreddini shot : http://ehsann.info/proof/MicrosoftCompiledHTMLhelpRCE.png Original Code : http://ehsann.info/exploit/5.txt video : http://ehsann.info/video/MicrosoftCompiledHTMLhelpRCE.mp4 print "Microsoft Compiled HTML Help - Remote Code Execution Exploit \r\n"; $port=80;...

Kaspersky Anti-Virus Code Execution

The vulnerability of Kaspersky Anti-Virus lies in the overflow of buffers in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions or execute arbitrary code during the scanning process using CHM files...

ManageEngine ServiceDesk Plus 9.1 Build 9110 Path Traversal

Exploit Title: ManageEngine ServiceDesk Plus Product Description ------------------- ServiceDesk Plus is an ITIL ready IT help desk software for organizations of all sizes. With advanced ITSM functionality and easy-to-use capability, ServiceDesk Plus helps IT support teams deliver world-class...

ManageEngine ServiceDesk Plus 9.1 build 9110 - Directory Traversal

ManageEngine ServiceDesk Plus 9.1 build 9110 - Directory Traversal Exploit Title: ManageEngine ServiceDesk Plus Product Description ------------------- ServiceDesk Plus is an ITIL ready IT help desk software for organizations of all sizes. With advanced ITSM functionality and easy-to-use...