CVE-2026-11399

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2026-11399

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in all versions up to and including 2.1.6 . The root cause is a lack of validation on a user-controlled 'id' parameter during deletion requests. This allows authenti...

CVE-2026-11399 Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

EUVD-2026-91917

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://cible python poc.py https://192.168.32.130 + https://192.168.32.130 est vulnérable blog: https://rustlang.rs/posts/simple-help/...

WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ Arbitrary Ticket Response Deletion vulnerability discovered by Saruul in WordPress Plugin Helpdesk Support Ticket System for WooCommerce versions = 2.1.6...

CVE-2026-96268

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdpr-data' parameter in all versions up to, and including, 6.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

EUVD-2026-90569

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdpr-data' parameter in all versions up to, and including, 6.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-100269

In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed...

EUVD-2026-90013

In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed...

CVE-2026-100269

In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability exists where the Authorized Reporters list for helpdesk projects could be bypassed. This flaw allows for unauthorized access or actions regarding reporter permissions. No specific exploit details or remediation instructions ar...

CVE-2026-100269

In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed...

Helpdesk-Telecom-CVE-2025-64459

리포지토리 다운로드 준비 1. 패키지를 업데이트합니다: sudo apt update 2. 필요한 경우 git을 설치합니다: sudo apt install -y git 3. 포트 포워딩 규칙을 설정해야 합니다. Debian 12.11.0 머신의 "네트워크" 설정에서 "포트 포워딩"을 클릭합니다. 4. 규칙을 추가합니다: 이름: Django; 프로토콜: TCP; 호스트 주소: 비어 있음; 호스트 포트: 8000; 호스트 주소: 비어 있음; 게스트 포트: 8000. 리포지토리 다운로드, 취약한 웹 애플리케이션 설치 1. 리포지토리를...

JitBit_Helpdesk_Auth_Bypass

Ce depot n’a pas de fichier README...

CVE-2026-83212

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Self Service...

EUVD-2026-79564

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Self Service...

CVE-2026-83212

Oracle Siebel CRM (component: Siebel Apps – Self Service, Helpdesk/Training) is affected by an easily exploitable vulnerability in supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can achieve a full takeover of the application, resulting in high impact...

PT-2026-92735

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Self Service versions 17.0 through 26.7 Description A flaw in the Helpdesk/Training component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

CVE-2026-83212: Improper Privilege Management

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Self Service...

JetBrains YouTrack < 2026.2.18769 Information Disclosure (CVE-2026-86496)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18769. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...