Zoho Desk - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Zoho Desk published at the 'play' market has multiple vulnerabilities...

finecms front Desk SQL injection

No description provided by source...

finecms front Desk arbitrary file upload vulnerability #1

No description provided by source...

finecms front Desk arbitrary file upload vulnerability #2

No description provided by source...

finecms the front Desk of any user login

No description provided by source...

finecms front Desk members arbitrary file upload vulnerability #1

No description provided by source...

finecms front Desk members arbitrary file upload vulnerability #2

No description provided by source...

finecms front Desk arbitrary file upload vulnerability #3

No description provided by source...

Request Participants beside Reporter can remove other participants.

h3. Summary: Apparently, participants of a request have a control to whom the request is "Shared" with even though it is not the Reporter. Hence, they can actually remove themselves from the Request and unable to view it after that. Also, they can remove other parties from the request as well. h3...

Open Ticket Request System Reload Vulnerability

OTRS Open Technology Real Service is an open source help desk and IT service management solution. OTRS suffers from a reinstallation vulnerability. Because the program does not validate the installation, an attacker can exploit the vulnerability to reinstall the system and directly manipulate the...

Error: "You have not chosen to trust...'' When Launching Applications Using Citrix Receiver Through NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users may receive the following error when launching an application with Receiver for Windows 4.7,...

How to Add Receiver Store Using Registry

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article explains how to add Receiver store using registry...

A solution for the problem that lock screen background image does not appear on Win 10 when Windows Receiver is Installed

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The lock screen background image does not appear when Windows Receiver is Installedon some Win 10...

Shortcuts on Citrix Receiver Disappears

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Shortcuts on Citrix Receiver disappears...

CVE-2016-4888

Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4889

ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions...

help.baixingmall.com XSS vulnerability

Vulnerable URL: http://help.baixingmall.com/cart/viewcart.php?id=viewcart"alert/OPENBUGBOUNTY/...

"This account is already added. Please select another account to add or press the close button" While Configuring Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When customer attempts to configure Receiver, he gets an error: This account is already added. Pleas...

Cross site scripting

Cross-site scripting XSS vulnerability in CA Service Desk Manager formerly CA Service Desk 12.9 and 14.1 allows remote attackers to inject arbitrary web script or HTML via the QBE.EQ.REFNUM parameter...

CVE-2016-9148

Cross-site scripting XSS vulnerability in CA Service Desk Manager formerly CA Service Desk 12.9 and 14.1 allows remote attackers to inject arbitrary web script or HTML via the QBE.EQ.REFNUM parameter...