Lucene search
+L

733 matches found

Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.12 views

PT-2025-103: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize data, instantiate arbitrary objects and alter their properties, causing severe disruption of the system. Vulnerability status: Confirmed by vendor Date of vulnerability...

7CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.10 views

PT-2025-100: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize data, create arbitrary objects with full property control, leading to serious security breaches. Vulnerability status: Confirmed by vendor Date of vulnerability...

7.2CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.8 views

PT-2025-99: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize untrusted data, manipulate objects and impair system functionality. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 19.07.2025 Recommendation...

7CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.10 views

PT-2025-98: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize data, gain control over application objects and cause malfunction. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 19.07.2025 Recommendations...

7CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.13 views

PT-2025-97: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize altered data, create arbitrary objects and disrupt normal system operation. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 19.07.2025...

7.2CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.16 views

PT-2025-96: Deserialization of untrusted data leads to Remote code execution (RCE) in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize arbitrary objects and fully control their properties, leading to total compromise of the web‑application logic and remote code execution RCE. Vulnerability status:...

8.8CVSS6.5AI score0.00668EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.13 views

PT-2025-104: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize untrusted data, craft arbitrary objects and control their properties, thereby compromising the application’s functionality. Vulnerability status: Confirmed by vendor Date...

8.8CVSS5.9AI score0.00978EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.15 views

PT-2025-101: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize manipulated data, control objects and disrupt the application. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 19.07.2025 Recommendations:...

7CVSS5.8AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.10 views

The vulnerability of the FreeScout support service management system, related to incorrect authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FreeScout support service management system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.00345EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.7 views

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

7.5CVSS5.4AI score0.0041EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.9 views

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and gain control over user sessions.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose confidential information and gain control over user sessions...

6.8CVSS5.4AI score0.00215EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.28 views

The vulnerability of the FreeScout support service management system, related to deficiencies in the deserialization mechanism, allows a hacker to gain unauthorized access and execute arbitrary code.

The vulnerability of the FreeScout support service management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access and execute arbitrary code on the application server...

8.7CVSS6.1AI score0.00787EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.7 views

The vulnerability of the FreeScout support service management system, related to incorrect authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FreeScout support service management system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

6.5CVSS5.5AI score0.00351EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.8 views

The vulnerability of the FreeScout support service management system, related to incorrect authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FreeScout support service management system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

4.3CVSS5.5AI score0.00406EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.6 views

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

8.7CVSS5.4AI score0.0027EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.9 views

The vulnerability of the FreeScout support service management system, related to unlimited loading of dangerous type files, allows a hacker to execute arbitrary code.

The vulnerability of the FreeScout support service management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8CVSS5.9AI score0.00958EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.11 views

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a malicious user to gain unauthorized access to the application’s functions.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to the application’s functions...

8CVSS5.5AI score0.00452EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.8 views

The vulnerability of the FreeScout support service management system, related to synchronization errors when using shared resources, allows a hacker to trigger a service failure.

The vulnerability of the FreeScout support service management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to cause a service failure...

6.5CVSS5.5AI score0.00345EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.15 views

The vulnerability of the FreeScout support service management system, which arises due to the failure to address the issue of CRLF sequences (returning a carriage followed by a line break), allows a hacker to execute arbitrary code.

The vulnerability of the FreeScout support service management system exists due to the lack of measures to neutralize CRLF sequences returning the cursor after translating a line. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending special characters into the...

8CVSS8.2AI score0.00336EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:0 a.m.10 views

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and carry out CSRF attacks.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to disclose confidential information and carry out a CSRF attack using a specially created website...

5.4AI score0.00134EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder