EUVD-2024-29950

Malicious code in bioql PyPI...

WordPress WP Gravity Forms FreshDesk plugin plugin <= 1.3.5 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WP Gravity Forms FreshDesk Plugin versions = 1.3.5...

CVE-2024-32129

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

CVE-2015-10102

A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. The attack may be launched remotely. Upgrading to version 1.8 is able to address this issue. The...

@adhawk/analytics-pixel-loader (>=0.0.2 <=2.0.2), @adhawk/analytics.js-integration-freshdesk (=0.1.0) +143 more potentially affected by CVE-2024-57066 via @ndhoule/defaults (=2.0.1)

@ndhoule/defaults NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ndhoule/defaults and may be impacted: - @adhawk/analytics-pixel-loader =0.0.2, =1.2.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.1.0 -...

Freshdesk (official) < 2.4.0 - Open Redirect

Description The plugin is vulnerable to Open Redirect due to insufficient validation on a redirect url. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

CVE-2024-32129

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

CVE-2024-32129 WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

CVE-2024-32129 WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

CVE-2024-32129

CVE-2024-32129 is a URL redirection (open redirect) vulnerability in the official Freshdesk plugin for WordPress, affecting Freshdesk (official) from n/a through 2.3.6. The issue has concrete details in connected sources: an open redirect vulnerability in the Freshdesk plugin identified as CVE-20...

WordPress Plugin Freshdesk 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error...

PT-2024-24423 · Freshworks · Freshdesk

Name of the Vulnerable Software and Affected Versions: Freshdesk versions through 2.3.6 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects Freshworks Freshdesk, allowing redirection to untrusted site...

WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Freshdesk official versions = 2.3.6...

WordPress Freshdesk (official) Plugin <= 2.3.6 is vulnerable to Open Redirection

Software Freshdesk official Type Plugin Vulnerable versions = 2.3.6 Fixed in 2.4.0 OWASP Top 10 A5: Security Misconfiguration Classification Open Redirection CVE CVE-2024-32129 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 4c0314383d62 Credits Le Ngoc Anh Required...

HackerOne: Support Tickets can be created on behalf of other users using spoofed email | Bypass of #2001913

A vulnerability allowed an attacker to create support tickets on behalf of other users by sending a fake email to [email protected]. This bypassed a previous fix implemented by HackerOne to prevent support tickets from being created via email...

HackerOne: Create miscellaneous support ticket on anyone's account through [email protected] email

A vulnerability was discovered where an attacker could create support tickets on anyone's account by sending a fake email to [email protected]. This allowed the attacker to create tickets on behalf of victims or even HackerOne staff. The issue was resolved internally and the created tickets...

CVE-2015-10102

A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. The attack may be launched remotely. Upgrading to version 1.8 is able to address this issue. The...

Open redirect

A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. The attack may be launched remotely. Upgrading to version 1.8 is able to address this issue. The...

CVE-2015-10102 Freshdesk Plugin redirect

A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. The attack may be launched remotely. Upgrading to version 1.8 is able to address this issue. The...

CVE-2015-10102

CVE-2015-10102 affects Freshdesk Plugin 1.7 for WordPress. It describes an open redirect in unknown functionality that could be exploited remotely. Upgrading to version 1.8 remedies the issue (patch: 2aaecd4e0c7c6c1dc4e6a593163d5f7aa0fa5d5b).