CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://target root@kitploit: python poc.py https://192.168.32.130 + https://192.168.32.130 存在漏洞 博客: https://rustlang.rs/posts/simple-help/...

JitBit_Helpdesk_Auth_Bypass

Este repositorio no tiene un README...

JetBrains YouTrack < 2026.2.18769 Information Disclosure (CVE-2026-86496)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18769. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

Helpdesk-Telecom-CVE-2025-64459

リポジトリのダウンロード準備 1. パッケージを更新します: sudo apt update 2. 必要に応じてgitをインストールします: sudo apt install -y git 3. ポート転送ルールを設定する必要があります。Debian 12.11.0マシンの「ネットワーク」設定で「ポート転送」をクリックします。 4. ルールを追加します: 名前: Django; プロトコル: TCP; ホストアドレス: 空; ホストポート: 8000; ゲストアドレス: 空; ゲストポート: 8000。 リポジトリのダウンロード、脆弱なウェブアプリケーションのインストール 1...

CVE-2026-86496

In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

CVE-2026-86478

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address...

CVE-2026-86496

In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

CVE-2026-86496

In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

EUVD-2026-72512

In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

CVE-2026-86496

JetBrains YouTrack versions before 2026.2.18769 are affected by a missing access control on Helpdesk authorized reporters , which exposed reporter email addresses . The vulnerability requires a low-privilege authenticated network user (no user interaction) and results in a low confidentiality imp...

EUVD-2026-72494

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address...

CVE-2026-86478

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address...

CVE-2026-86478

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address...

CVE-2026-86478

JetBrains YouTrack is vulnerable to an improper authentication flaw in the YouTrack Helpdesk component prior to versions 2025.3.161254 and 2026.1.14042 . The vulnerability allows an unauthenticated attacker to perform account takeover by supplying a self-asserted email address, effectively bypass...

PT-2026-86850

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address...

EUVD-2026-65158

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

EUVD-2026-65177

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...

CVE-2026-78434

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

CVE-2026-78435

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...

CVE-2026-78435 Faveo Helpdesk Logo SettingsController.php unlink path traversal

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...