1104 matches found
CVE-2022-24140: Download of Code Without Integrity Check
IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a config file. After downloading the config file, the products will parse the HTTP location of the update from the file a...
多款IOBit产品安全漏洞
IOBit Advanced System Care Free is a system management utility. iTop Screen Recorder is a powerful free Windows screen recorder. iTop VPN is a VPN software. iTop VPN is a VPN software. IOBit Advanced System Care Free is a system management utility. iTop Screen Recorder is a product of iTop. iTop...
CVE-2022-24141: Undefined Security Weakness
The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastateiTopVPNPipeServer on a loop. An attacker that opened a named pipe with the same name can use it to gain the token of another user by listening for connections and abusing ImpersonateNamedPipeClient...
PT-2022-16490
Name of the Vulnerable Software and Affected Versions IOBit Advanced System Care version 15 iTop Screen Recorder version 2.1 iTop VPN version 3.2 Driver Booster version 9 iTop Screenshot affected versions not specified Description The issue concerns the update procedure of the affected software,...
PT-2022-16491
Name of the Vulnerable Software and Affected Versions iTop VPN version 3.2 Description The issue arises from the iTopVPNmini.exe component trying to connect to a named pipe called datastate iTopVPN Pipe Server in a loop. An attacker can exploit this by opening a named pipe with the same name,...
iTop VPN 安全漏洞
iTop VPN is a VPN software from iTop. It allows users to remain anonymous and secure with advanced Salsa20 chacha20 256-bit encryption. A security vulnerability exists in iTop VPN version 3.2, which stems from the iTopVPNmini.exe component attempting to loop through connections to the...
The vulnerability in the iTop web tool for managing IT services, related to the re-use of CSRF tokens, allows a attacker to execute a CSRF attack.
The vulnerability in the iTop IT service management web tool is related to the repeated use of CSRF tokens. Exploiting this vulnerability could allow a malicious actor to execute a CSRF attack remotely...
Malicious code in itop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b458802fee3da23646a1e857fddd5526b6b47d4b81fd22691f15e1718e990cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3982 Malicious code in itop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b458802fee3da23646a1e857fddd5526b6b47d4b81fd22691f15e1718e990cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-31403
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...
CVE-2022-31403
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...
Cross site scripting
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...
CVE-2022-31403
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...
CVE-2022-31403
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...
CVE-2022-31403
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...
CVE-2022-31403
CVE-2022-31403 affects the IT service management platform iTop (notably v3.0.x, with the core issue reported as an XSS via /itop/pages/ajax.render.php). The Red Hat advisory confirms the existence of an XSS vulnerability in ITOP 3.0.1, with public-facing impact described as cross-site scripting. ...
ITOP 跨站脚本漏洞
ITOP is a platform that provides all the resources needed to optimize iTop. A security vulnerability exists in ITOP version v3.0.1, which can be exploited by an attacker to execute malicious scripts into a legitimate website or web application...
CVE-2022-31403: Improper Neutralization of Input During Web Page Generation
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...
ITOP Cross-Site Scripting Vulnerability (CNVD-2022-58397)
ITOP is a platform that provides all the resources needed to optimize iTop. A cross-site scripting vulnerability exists in ITOP version 3.0.1, which stems from a lack of checksum filtering of user-supplied and output data on the /itop/webservices/export-v2.php page. An attacker can exploit this...