GitLab 访问控制错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, etc. GitLab CE/EE is vulnerable to an access control error, which stems from the existence of GitL...

ZOHO ManageEngine ServiceDesk Plus 访问控制错误漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates incident management, problem management, asset management IT project management, procurement and contract management and oth...

ServiceTonic Improper Access Control Vulnerability

ServiceTonic is an ITIL-compliant service desk and enterprise services software. serviceTonic versions prior to 9.0.35937 are vulnerable to an improper access control vulnerability. An attacker could exploit this vulnerability to gain unauthorized access to the system via the login form, allowing...

londonhotdesk.co.uk Improper Access Control vulnerability OBB-2229577

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

frontdesksupply.com Improper Access Control vulnerability OBB-2173863

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Artica Integria IMS has an unspecified vulnerability

Artica Integria IMS is a web-based help desk software from the Spanish company Artica. The software features SLA tracking, workflow management, personalized reporting and email management.A security vulnerability exists in the Artica Integria IMS login checks, which could be exploited by an...

Zammad Command Injection Vulnerability

Zammad is a web-based open source help desk/customer support system. a command injection vulnerability exists in versions of Zammad prior to 4.1.1. An attacker could exploit the vulnerability to inject commands via custom packages...

Zammad Denial of Service Vulnerability (CNVD-2021-81949)

Zammad is an open source web-based help desk/customer support system. a denial of service vulnerability exists in versions of Zammad prior to 4.1.1. An attacker could exploit the vulnerability by sending a series of specially crafted requests to cause an infinite loop, which could lead to a denia...

Zammad Elevation of Privilege Vulnerability

Zammad is an open source web-based help desk/customer support system. an elevation of privilege vulnerability exists in versions of Zammad prior to 4.1.1. An attacker could exploit this vulnerability by sending a specially crafted request to modify other agent accounts to be able to log in with...

Zammad Remote Code Execution Vulnerability

Zammad is a Web-based open source help desk/customer support system. remote code execution vulnerability exists in versions of Zammad prior to 4.1.1. An attacker could exploit the vulnerability by sending a specially crafted request to Zammad to execute code on the server...

Zammad server-side request forgery vulnerability

Zammad is a web-based open source help desk/customer support system. server-side request forgery vulnerability exists in GitHub, GitLab integration in versions prior to Zammad 4.1.1. No detailed vulnerability details are currently available...

Zammad Cross-Site Scripting Vulnerability (CNVD-2021-81956)

Zammad is a Web-based open source help desk/customer support system. An attacker could upload an attachment to a "work order" via an "article", which could be exploited to inject malicious JavaScript code...

Zammad Remote Code Execution Vulnerability (CNVD-2021-81954)

Zammad is an open source web-based help desk/customer support system. a remote code execution vulnerability exists in the Form functionality of Zammad versions prior to 4.1.1. The vulnerability stems from improper handling of deserialization. An attacker could exploit the vulnerability to execute...

Artica Integria IMS 安全漏洞

Artica Integria IMS is a web-based help desk software from the Spanish company Artica. The software features SLA tracking, workflow management, personalized reporting and email management.A security vulnerability exists in the Artica Integria IMS login checks, which could be exploited by an...

ZOHO ManageEngine ADManager Plus Code Execution Vulnerability

ZOHO ManageEngine ADManager Plus is a Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day administrative tasks, such as bulk management of user accounts and A...

Deskpro Cross-Site Scripting Vulnerability

Deskpro is a suite of helpdesk software from Deskpro UK. The software includes a customer relationship management component, among other things, and offers features such as e-mail, live chat, and voice. A cross-site scripting vulnerability exists in Deskpro cloud and on-premise Deskpro in version...

CVE-2021-37415

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication...

ZOHO ManageEngine ServiceDesk Plus 访问控制错误漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is a set of ITIL-based IT service management software from ZOHO. The software integrates incident management, issue management, asset management IT project management, procurement and contract management, etc. An authorization issue vulnerability exists in...

CVE-2021-32076

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...

CVE-2021-32076

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...