CVE-2024-28228: Authentication Bypass by Spoofing

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...

PT-2024-2099 · Jetbrains · Jetbrains Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.1.25893 Description: The issue is related to authentication bypass via spoofing, allowing a remote attacker to create comments on behalf of an arbitrary user. This can be exploited in the HelpDesk...

CVE-2024-1932

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932

CVE-2024-1932 affects the Freescout project (freescout-helpdesk/freescout). The entry describes an Unrestricted Upload of File with Dangerous Type vulnerability in Freescout, enabling upload of dangerous files. Multiple sources (NVD, Red Hat, OSV, CVE list) report a network-based issue with high ...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

4 Ways Hackers use Social Engineering to Bypass MFA

When it comes to access security, one recommendation stands out above the rest: multi-factor authentication MFA. With passwords alone being simple work for hackers, MFA provides an essential layer of protection against breaches. However, it's important to remember that MFA isn't foolproof. It can...

CVE-2024-0595

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpasgetusers function hooked via AJAX in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

CVE-2024-0596

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editorhtml function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

CVE-2024-0596 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editorhtml function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

CVE-2024-0595

CVE-2024-0595 concerns the Awesome Support – WordPress HelpDesk & Support Plugin. The issue is an unauthorized access vulnerability caused by a missing capability check in the wpas_get_users() function, triggered via AJAX, affecting all versions up to and including 6.1.7. The impact, as documente...

CVE-2024-0594: Improper Neutralization of Special Elements used in an SQL Command

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injection via the 'q' parameter of the wpasgetusers action in all versions up to, and including, 6.1.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2024-0596: Missing Authorization

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editorhtml function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

CVE-2024-0595: Missing Authorization

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpasgetusers function hooked via AJAX in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Missing Authorization via wpas_get_users()

Description The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpasgetusers function hooked via AJAX in all versions up to, and including, 6.1.7. This makes it possible for authenticated...

Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Missing Authorization via editor_html()

Description The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editorhtml function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, wit...