CVE-2020-4664

CVE-2020-4664 affects IBM Engineering Requirements Quality Assistant On-Premises. The issue is a cross-site scripting vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credential disclosure within a trusted session. Connected sources confirm this is ti...

CVE-2020-4663

CVE-2020-4663 affects IBM Engineering Requirements Quality Assistant On-Premises and describes a cross-site scripting (XSS) vulnerability in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. The primary impact, as stated, is ...

CVE-2020-4663

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-4667: Improper Input Validation

IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282...

CVE-2020-4663: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-4664: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-4666: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Security Bulletin: Multiple vulnerabilities affect IBM Engineering Requirements Quality Assistant On-Premises

Summary There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises including the IBM SDK, Java Technology Edition Quarterly CPU from Oct 2019, Jan 2020 and Apr 2020 plus CVE-2020-2654 deferred from Oracle Jan 2020 CPU and CVE-2019-2949 deferred from...

WordPress Media Library Assistant plugin <= 2.84 - Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Blind SQL Injection SQLi vulnerability found by Lenon Leite in WordPress Media Library Assistant plugin versions = 2.84. Solution Update the WordPress Media Library Assistant plugin to the latest available version at least 2.9.0...

The vulnerability of the Intel Endpoint Management Assistant cloud service arises from an incorrect path name limitation for the restricted access catalog. This allows attackers to escalate their privileges.

The vulnerability of the Intel Endpoint Management Assistant cloud service exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Intel Driver Support Assistant Default Configuration Issue Vulnerability

Intel Driver & Support Assistant is an Intel driver and support management tool from Intel Corporation USA. This tool is mainly used to get the latest applications provided by Intel. A default configuration issue vulnerability exists in Incorrect default permissions in IntelR DSA versions prior t...

Citrix Health Assistant - Troubleshoot VDA Registration and Session Launch

Citrix Virtual Apps and Desktops, formerly XenDesktop, fits the enterprise need to bring both VDI and apps into a user-centric experience. Citrix Virtual Apps, formerly XenApp, fits the enterprise need to bring legacy apps into a cloud management environment. Citrix Health Assistantv1.8.3.71...

Citrix LTSR Assistant Tool

Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools LTSR Assistantv2.9.0.1 Created Date: Apr 12, 2016 Updated Date: Apr 16, 2025 What's New inv2.9.0.1 Fixed a sporadic issue that prevented...

HP Display Assistant x64 Edition 3.20 - (DTSRVC) Unquoted Service Path Vulnerability

Exploit Title: HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path Exploit Author: Julio Aviña Vendor Homepage: https://www.portrait.com/ Software Link: https://www.portrait.com/dtune/hwp/enu/ Software Version: 3.20 File Version: 1.0.0.1 Tested on: Windows 10 Pro x64 es...

HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path

Exploit Title: HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path Date: 2020-11-08 Exploit Author: Julio Aviña Vendor Homepage: https://www.portrait.com/ Software Link: https://www.portrait.com/dtune/hwp/enu/ Software Version: 3.20 File Version: 1.0.0.1 Tested on: Windows 10 P...

HP Display Assistant x64 Edition 3.20 Unquoted Service Path

Exploit Title: HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path Date: 2020-11-08 Exploit Author: Julio Aviña Vendor Homepage: https://www.portrait.com/ Software Link: https://www.portrait.com/dtune/hwp/enu/ Software Version: 3.20 File Version: 1.0.0.1 Tested on: Windows 10 P...

Windows Migration Assistant < 2.2.0.0 Arbitrary Code Execution (HT211186)

According to its self-reported version number, the version of Windows Migration Assistant installed on the remote host is prior to 2.2.0.0. It is, therefore, affected by an arbitrary code execution vulnerability due to a dynamic library loading issue. An unauthenticated, local attacker can exploi...

Windows Migration Assistant Installed

Binary data windowsmigrationassistantinstalled.nbin...

Command Execution Vulnerability in Anaconda Self-Marketing Assistant

Python Self-Media Marketing Assistant is a self-media marketing tool that integrates the functions of public number assistant and WeChat editor. Anaconda Media Marketing Assistant has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

The vulnerability of the Intel Driver & Support Assistant software lies in its susceptibility to insecure privilege management, allowing attackers to escalate their privileges.

The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to insecure handling of privileges. Exploiting this vulnerability can allow a hacker to enhance their own privileges...