virtual support office-xp <= 3.0.29 Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

Help Desk Software 1.1g - CSRF (add admin) Vulnerability

No description provided by source. Exploit Title: Help Request System 1.1g XSRF add admin Date: 08-23-2011 Google Dork: powered by freehelpdesk.org Author: G13 Software link: http://freehelpdesk.org/ Version: 1.1g html body form id=edit method=post...

Microsoft Windows 95/98/NT 4.0 Help File Trojan Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/868/info The help files for the Windows Help system .cnt, .hlp can be edited so that they run an arbitrary executable when selected by a user. The executable will run at the privelege level of the user. The .cnt files are...

Help Center Live 1.0/1.2/2.0 Module.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15404/info Help Center Live is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to disclose...

Microsoft HTML Help <= 6.1 Stack Overflow

No description provided by source. Source: http://aluigi.org/adv/chm1-adv.txt Luigi Auriemma Application: Microsoft HTML Help http://www.microsoft.com Versions: = 6.1 Platforms: Windows any version included the latest Windows 7 Bug: stack overflow Date: 12 Apr 2011 found 20 Feb 2011 Author: Luigi...

Qpopper 4.0.x - poppassd Local Root Exploit

No description provided by source. / Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include stdio.h include stdlib.h include unistd.h include sys/stat.h...

PHD Help Desk 1.43 area.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the...

Microsoft Windows XP/2000 - Help File Relative Path Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by enticing a victim to load help files when workin...

MS Internet Explorer (<= XP SP2) HTML Help Control Local Zone Bypass

No description provided by source...

Crafty Syntax Live Help 2.9.9 - Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20711/info Crafty Syntax Live Help is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

Horde Help Viewer <= 3.1 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Wed Apr 5 21:51:12 CEST 2006 [email protected] Horde help module remote execution telnet 310.27.901.33.1109 1689 thanks horatio for the address USER paranoia PASS total SYST REST 100 REST 0 PWD TYPE A PASV LIST CWD 0days GET horddy.pl w0w this dam...

Web Help Desk by SolarWinds - Stored XSS

No description provided by source. Author: loneferret of Offensive Security Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/ Discovered: August 18th 2012...

PHD Help Desk 2.12 - SQL Injection Vulnerability

No description provided by source. Exploit Title: PHD Help Desk 2.12 SQLi Date: 05/24/2013 Exploit Author: drone @dronesec More information: http://forelsec.blogspot.com/2013/06/phd-help-desk-212-sqli-and-xss.html Vendor Homepage: http://www.p-hd.com.ar/ Software Link:...

Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7102/info The Microsoft Windows 2000 Help facility does not perform sufficient bounds checking on .cnt files. If a .cnt file containing an unusually long :Link URI was opened by the Windows Help facility, a buffer would b...

Crowdsourcing a Tool for Application Vulnerability Research

Pulling in security help on a project has traditionally meant either hiring more full-time help, or bringing in an outside consultant. Enterprises and vendors alike, however, are starting to really go outside the perimeter these days and are taking advantage of crowdsourcing. Given the paranoia i...

openSUSE Security Update : icinga (openSUSE-SU-2014:0069-1)

imported upstream version 1.10.2 - includes fix for possible denial of service in CGI executables: CVE-2013-7108 bnc856837 - core: Add an Icinga syntax plugin for Vim 4150 - LE/MF - core: Document dropped options logexternalcommandsuser and eventprofilingenabled 4957 - BA - core: type in spec...

CVE-2014-3806: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attackers to read arbitrary files via a .. dot dot in the xmlpath parameter...

Directory traversal

Directory traversal vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL...

CVE-2014-0917

Cross-site scripting XSS vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0918

Directory traversal vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL...