CVE-2024-27125

A cross-site scripting XSS vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later...

CVE-2024-27125 Helpdesk

A cross-site scripting XSS vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later...

CVE-2024-27125

Helpdesk is affected by a cross-site scripting (XSS) vulnerability that could allow authenticated administrators to inject malicious code via the network. Affected versions are prior to 3.3.1 (i.e., before 3.3.1); the issue is resolved in Helpdesk 3.3.1 and later. The vulnerability’s exposure is ...

CVE-2024-27125 Helpdesk

A cross-site scripting XSS vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later...

QNAP Helpdesk 跨站脚本漏洞

QNAP Systems Helpdesk is a helpdesk application from China-based QNAP Systems. A cross-site scripting vulnerability exists in QNAP Helpdesk version 3.3.1 and prior versions, which stems from the inclusion of a cross-site scripting vulnerability. An attacker can exploit this vulnerability to injec...

CVE-2024-27125: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later...

Cerberus Helpdesk User Hash Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cerberus Helpdesk User Hash Disclosure', 'Description' = %q This module extracts usernames and password hashes from the Cerberus Helpdesk through...

PSA: These ‘Microsoft Support’ ploys may just fool you

Many people turn to their favorite search engine when they are facing an issue with their computer. One common search query is to look for the telephone number or contact form for Microsoft, Apple or one of many other brands. Scammers have long been interested in pretending to be Microsoft...

Vulnerabilities fixed in Solarwinds Web Helpdesk

Solarwinds fixed vulnerabilities in Web Helpdesk A malicious party can exploit the vulnerabilities to execute code on the system using Java deserialization. A malicious party can also use hardcoded credentials to gain access to data and functionality. Solarwinds developers have released a hotfix ...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution offers multiple payment methods, SMS alerts, and product image zoom, among other features. A security vulnerability exists in PrestaShop helpdesk version 2.4.0 and prior versions, which stems from...

UVDesk Community Helpdesk Improper Privilege Management

Improper Privilege Management in uvdesk/community-skeleton...

GHSA-57Q5-H622-3CPX UVDesk Community Helpdesk Improper Privilege Management

Improper Privilege Management in uvdesk/community-skeleton...

Awesome Support < 6.1.7 - Insufficient Authorization via wpas_can_delete_attachments()

Description The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check in the wpascandeleteattachments function in all versions up to, and including 6.1.6. This makes it possible for...

CVE-2024-28228

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...

CVE-2024-28228

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...

Design/Logic Flaw

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...

CVE-2024-28228

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...

CVE-2024-28228

JetBrains YouTrack before 2024.1.25893 is affected. The vulnerability arises in the HelpDesk component, allowing a remote attacker to create comments on behalf of an arbitrary user in HelpDesk. This can enable impersonation within issue discussions. Affected product: JetBrains YouTrack; vulnerabl...

CVE-2024-28228

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...

JetBrains YouTrack Security Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2024.1.25893, which...