CVE-2020-2507: Improper Neutralization of Special Elements used in a Command

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3...

QNAP Systems Helpdesk 安全漏洞

Qnap Systems QNAP Systems Helpdesk is a helpdesk application from China Wizlink Qnap Systems. An Access Control Error vulnerability exists in QNAP Systems Helpdesk versions prior to 3.0.3, which arises from improper access control and can be exploited by an attacker to gain control of a QNAP devi...

Qnap Systems QNAP Systems Helpdesk 操作系统命令注入漏洞

Qnap Systems QNAP Systems Helpdesk is a helpdesk application from China Wizlink Qnap Systems. An Access Control Error vulnerability exists in QNAP Systems Inc. Helpdesk versions prior to 3.0.3, which arises from improper access control and can be exploited by an attacker to gain control of a QNAP...

PT-2021-11106

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Helpdesk versions prior to 3.0.3 Description: The issue is a command injection vulnerability that could allow remote attackers to run arbitrary commands if exploited. It affects earlier versions of QTS, potentially allowing...

Using the Manager Attribute in Active Directory (AD) for Password Resets

Creating workflows around verifying password resets can be challenging for organizations, especially since many have shifted work due to the COVID-19 global pandemic. With the numbers of cyberattacks against businesses exploding and compromised credentials often being the culprit, companies have ...

CVE-2020-25917

Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser....

CVE-2020-25917: Incorrect Resource Transfer Between Spheres

Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser....

PT-2020-16254

Name of the Vulnerable Software and Affected Versions Stratodesk NoTouch Center versions prior to 4.4.68 Description The issue is related to incorrect access control, allowing a low-privileged user, such as one with "helpdesk" privileges, to perform privileged operations. This includes adding a n...

Stratodesk Notouch Center Access Control Error Vulnerability

Stratodesk Notouch Center is a management software for a large number of clients and other devices from Stratodesk USA. The software supports access to, and control of, multiple ADIs from a single location and has the ability to manage X86 and Raspberry Pi devices. An access control error...

The SmartHub Tool

SmartHub v1 Created Date: 12/17/2015 Updated Date: 4/4/2016 Current Version is v1.1 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the...

File Upload Vulnerability in Kaixin Helpdesk System

The Kairos Helpdesk System is a system for dealing with day-to-day issues. A file upload vulnerability exists in the Qixing Helpdesk System. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

The vulnerability of the Clone function in the GLPI system, which handles requests, incidents, and inventory management of computer equipment, allows a hacker to execute arbitrary SQL commands.

The vulnerability of the Clone function in the GLPI system for requests, incidents, and inventory management is related to the improper elimination of special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

SQL Injection Vulnerability in the Helpdesk Ca***.aspx Page of Qixing Helpdesk System

Qixing Helpdesk system helpdesk is the main enterprise application product of Qixing Studio, Qixing Helpdesk includes modules such as problem management, asset management, voting, etc., and supports pie charts, bar charts and other forms to give IT's work report, and timely understanding of the...

QNAP Releases Security Updates for QNAP Helpdesk

QNAP Systems has released security updates to address vulnerabilities in QNAP Helpdesk. An attacker could exploit these vulnerabilities to take control of an affected QNAP network-attached storage NAS device. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

CVE-2020-2507

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3. Recent assessments: Assessed Attacker Value: 0...

helpdesk.conceptdraw.com Cross Site Scripting vulnerability OBB-1381700

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

deserveit.visionhelpdesk.com Cross Site Scripting vulnerability OBB-1354238

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

helpdesk-bistummainz.de Cross Site Scripting vulnerability OBB-1340645

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2018-19947

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later...

CVE-2018-19948

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery CSRF vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and...