CVE-2010-0862

The CVE-2010-0862 entry concerns Oracle Industry Product Suite 13.1, specifically the Retail - Oracle Retail Markdown Optimization component. It describes an unspecified vulnerability that could allow remote attackers to affect integrity via unknown vectors related to Online Help. The threat cont...

CVE-2010-0864: Undefined Security Weakness

Unspecified vulnerability in the Retail - Oracle Retail Place In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0863: Undefined Security Weakness

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0862: Undefined Security Weakness

Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote attackers to affect integrity via unknown vectors related to Online Help...

MS10-022: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169)

The installed version of the VBScript Scripting Engine allows an attacker to specify a Help file location when displaying a dialog box on a web page. If a user can be tricked into pressing the F1 key while such a dialog box is being displayed, an attacker can leverage this to cause the Windows He...

Nine days of self-help built Station system Xday-vulnerability warning-the black bar safety net

Keywords: inurl:/regTemletSel. asp? step=2 Or E-Commerce self-help built Station-your ideal assistant Use method: 1 registered 2 web site management---resource management---upload hackqing. asp;qing.jpg 3get a webshell Special case: 1. the forced name change 2. the iis parsing vulnerability is...

Remote Help HTTP server format string vulnerability

No description provided...

Remote Help Default Credentials

It was possible to log in to the Remote Help server on the remote host using a default set of credentials. An attacker could exploit this flaw in order to gain complete control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Remote Help Detection

The remote host is running Remote Help, a web server for Windows that can be used to control the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45139; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Remote Help Detection";...

Trouble Ticket Software ttx.cgi Remote File Download

No description provided by source. Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob @ http://n01d.com Type:...

Trouble Ticket Software - ttx.cgi Arbitrary File Download

Trouble Ticket Software - ttx.cgi Arbitrary File Download Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob...

Remote Help HTTP 0.0.7 - GET Format String Denial of Service

Remote Help HTTP 0.0.7 - GET Format String Denial of Service source: https://www.securityfocus.com/bid/38875/info Remote Help is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Due to the...

Trouble Ticket Software - 'ttx.cgi' Arbitrary File Download

Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob @ http://n01d.com Type: Trouble Ticket Software 0Day...

Remote Help HTTP 0.0.7 - GET Format String Denial of Service

source: https://www.securityfocus.com/bid/38875/info Remote Help is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Due to the nature of this issue arbitrary code-execution may be possible;...

CA20100304-01: Security Notice for CA SiteMinder

CA20100304-01: Security Notice for CA SiteMinder Issued: March 04, 2010 CA's support is alerting customers to a security risk with CA SiteMinder. Multiple cross site scripting XSS vulnerabilities exist that can allow a remote attacker to potentially gain sensitive information. CA has provided...

Microsoft Internet Explorer 'VBScript' RCE Vulnerability

Internet Explorer and VBScript are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by entici...

Microsoft Windows XP/2000 - Help File Relative Path Remote Command Execution

source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by enticing a victim to load help files when working in a directory containing crafte...

CVE-2010-0927

CVE-2010-0927 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Domino’s Help component (help/readme.nsf/Header). Affected are Domino 7.x prior to 7.0.4 and 8.x prior to 8.0.2; the issue allows remote attackers to inject arbitrary script/HTML via the BaseTarget parameter in an Ope...

CVE-2010-0927: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920...