CVE-2024-51377

The open-source ticketing system Faveo Helpdesk & Servicedesk (On-Premise and Cloud) version 9.2.0 by Ladybird Web Solution is vulnerable to arbitrary code execution . A remote attacker can exploit this issue by interacting with the Subject and Identifier fields, potentially allowing for unauthor...

PT-2024-34613 · Ladybird Web Solution · Ladybird Web Solution Faveo Helpdesk & Servicedesk

Name of the Vulnerable Software and Affected Versions: Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud version 9.2.0 Description: An issue in the software allows a remote attacker to execute arbitrary code via the Subject and Identifier fields. This enables the attacker to...

CVE-2024-51377: Improper Neutralization of Input During Web Page Generation

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

JetBrains YouTrack < 2024.3.47707 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.47707. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Potential ReDoS exploit was possible via email header parsing in Helpdesk functionality CVE-2024-50574 - Reflecte...

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

CVE-2024-50574

JetBrains YouTrack before 2024.3.47707 is affected by CVE-2024-50574: a potential ReDoS via email header parsing in Helpdesk. The issue is described in multiple sources as a denial of service risk with availability impact (per CVSS notes: HIGH). No explicit exploit details or active exploit statu...

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

PT-2024-7560

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2024.3.47707 Description The issue is related to the Helpdesk function in YouTrack, which uses a regular expression with inefficient computational complexity. This could allow a remote attacker to cause a...

CVE-2024-50574: Inefficient Regular Expression Complexity

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

Faveo Helpdesk 安全漏洞

Faveo Helpdesk is an open source ticketing system built by Faveo based on Laravel framework. A security vulnerability exists in Faveo Helpdesk v2.0.3, which stems from an arbitrary file upload issue in the Ticket Generation feature...

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

PT-2024-32010

Name of the Vulnerable Software and Affected Versions Ladybird Web Solution Faveo-Helpdesk version 2.0.3 Description The issue is related to an arbitrary file upload vulnerability in the Ticket Generation function. This allows attackers to execute arbitrary code by uploading crafted files, such a...

CVE-2024-46482: Improper Neutralization of Input During Web Page Generation

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

Vulnerability fixed in Solarwinds Web Helpdesk

Solarwinds has fixed a vulnerability in Web Helpdesk. An unauthenticated malicious person could exploit the vulnerability to execute deserialization code on the system without authentication using Java. Solarwinds developers have released a hotfix to fix the vulnerability. See attached references...

VulnCheck KEV: CVE-2015-4074

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task...

CVE-2024-27125

A cross-site scripting XSS vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later...