138 matches found
CVE-2010-3498
AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to...
CVE-2005-1673
Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to index.php, 2 tid parameter to view.php, fid parameter to 3 download.php or 4 chatdownload.php, 5 status parameter to icon.php, TICKETtid parameter to 6...
Netflix’s US Password-Sharing Crackdown Isn’t Happening—Yet
Accidental revisions to a US Help Center page sparked confusion about the streamer's next moves. But restrictions on account sharing are still coming soon...
Instagram 'Help Center' Phishing Scam Pilfers Credentials
Turkish-speaking cybercriminals are sending Instagram users seemingly legitimate messages from the social media company, with the aim of stealing their Instagram and email credentials. Researchers said that the campaign has been targeting hundreds of celebrities, startup business owners, and othe...
CVE-2017-18542
The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues...
CVE-2017-18542
The CVE-2017-18542 entry concerns the Zendesk Help Center by BestWebSoft WordPress plugin prior to 1.0.5, which has multiple XSS vulnerabilities. Affected component: zendesk-help-center plugin (WordPress). Root cause: cross-site scripting in the plugin’s code. Impact: authenticated attackers can ...
CVE-2017-18542
The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues...
CVE-2017-18542: Improper Neutralization of Input During Web Page Generation
The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues...
The Siemens power monitoring system there are two information disclosure security vulnerability-vulnerability warning-the black bar safety net
Positive Technologies security experts to review Siemens SICAM PASpower automation systemafter the solution is found, Siemens SICAM PAS, the presence of two information disclosure VulnerabilityCVE-2 0 1 6-5 ! Security experts to the West door company to report a safety issue, Siemens immediately...
helpcenter.onlyoffice.com XSS vulnerability
Vulnerable URL: http://helpcenter.onlyoffice.com/search.aspx?text=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.02.2016 Latest check for patch:| 23.02.2016 19:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Social networking site LinkedIn(LinkedIn)repair help at the center of the XSS-vulnerability warning-the black bar safety net
LinkedIn developers in this week and fixed a stored cross site scripting vulnerabilities, a hacker use it in the LinkedIn help forum to spreadXSSworms. Science LinkedIn is committed to global professionals to provide a communication platform, and to help them do more with less, to play Director...
LinkedIn Fixes Persistent XSS Vulnerability
Developers at LinkedIn fixed a persistent cross site scripting vulnerability in the social network this week that could have been exploited to spread a worm on the service’s help forums. It was a very a quick turnaround for the company according to the researcher, who said LinkedIn fixed the issu...
SQL Injection Vulnerability in Public Security Office System of Jiangsu Ouso Software Co.
Ltd. Public Security Office System is modeled after the entity public security organs institutions, functions, powers, etc., with the Internet as the carrier, supported by the comprehensive application of information technology, the entity public security organs with close contact with the people...
Mount host is not specified for backup repository “Repository name”
Challenge When attempting to perform an Instant Recovery, Multi-OS FLR, or SureBackup the following error is thrown. Mount host is not specified for backup repository "" Multi-OS Restore: Instant Recovery: SureBackup: Solution Within the settings for the repository specified in the error there is...
Microsoft Help Center XSS and Command Execution
No description provided by source. $Id: ms10042helpctrxsscmdexec.rb 10388 2010-09-20 04:37:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
MS Windows XP/2000/NT 4 Help Facility ActiveX Control Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/5874/info The ActiveX control that provides much of the functionality for the Windows Help Center contains an unchecked buffer. Successful exploitation could result in execution of arbitrary code in the security context o...
Help Center Live 1.0/1.2.x Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13666/info Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application is affected by...
Help Center Live 2.0.6 - (module=helpcenter&file=) Local File Inclusion
No description provided by source...
Help Center Live 1.0/1.2/2.0 Module.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15404/info Help Center Live is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to disclose...
Help Center Live 2.1.2 Module.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19256/info Help Center Live is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files from the vulnerable...