7-Zip 16 DLL Hijacking

Microsoft Windows Environment Variable Expansion Issue Leads To Remote DLL Hijack Attack vector: 7-ZIP v.16 7-ZIP v.16 and possibly other softwares that utilizes the HTML Help System are prone to a remote DLL hijacking issue which leads to arbitrary code execution. PoC attached. because the OS...

Security Bulletin: Vulnerabilities in Apache Log4j affect IBM Spectrum Protect Operations Center (CVE-2021-45105, CVE-2021-45046)

Summary Vulnerabilities in Apache Log4j could result in a denial of service or remote code execution. These vulnerabilities may affect the Help system in IBM Spectrum Protect Operations Center. The below fix packages include Apache Log4j 2.17 Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTIO...

Security Bulletin: Vulnerability in Apache Log4j affects IBM Spectrum Copy Data Management (CVE-2021-44228)

Summary A vulnerability in Apache Log4j could allow an attacker to execute arbitrary code on the system. This vulnerability may affect the Help system in IBM Spectrum Copy Data Management Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execut...

Security Bulletin: Vulnerability in Help system affects multiple IBM Rational products based on IBM Jazz technology (CVE-2015-0113)

Summary An undisclosed vulnerability in the help system affects the following IBM Jazz based Applications: Collaborative Lifecycle Management CLM, Rational Requirements Composer RRC, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC,...

Security Bulletin: Vulnerabilities in IBM Rational Synergy's Help System (CVE-2013-0464, CVE-2013-0467, CVE-2013-0599)

Summary IBM Rational Synergy can be affected by three vulnerabilities in the IBM Eclipse Help System IEHS, which is used to display the IBM Rational Synergy help content. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow thi...

CVE-2020-4082: Improper Neutralization of Input During Web Page Generation

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting...

PT-2020-17868

Name of the Vulnerable Software and Affected Versions HCL Connections version 5.5 Description The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to execute script in a victim's Web...

Security Bulletin: Cross-Site Scripting vulnerability in Business Space Help affects IBM Business Monitor - CVE-2013-0464

Summary IBM Eclipse Help System bundled with Business Space Help is vulnerable to Cross-Site Scripting CVE-2013-0464. Vulnerability Details CVEID: CVE-2013-0464 DESCRIPTION: IBM Eclipse Help System, as used in multiple IBM products, is vulnerable to cross-site scripting. A remote attacker could...

Security Bulletin: Open Redirect and Cross-Site Scripting Vulnerabilities in the Rational Change Help System (CVE-2012-2159, CVE-2012-2161)

Summary Some scripts in the help system used by IBM Rational Change are vulnerable to open redirect or cross-site scripting attacks. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires...

Security Bulletin: Rational Change can be affected by vulnerabilities in the IBM Eclipse Help System (CVE-2013-0464 and CVE-2013-0467)

Summary IBM Rational Change can be affected by two vulnerabilities Cross-site scripting and Help system's source code disclosure by using a specially crafted URL in the IBM Eclipse Help System IEHS, which is used to display the IBM Rational Change help content. Vulnerability Details | Subscribe t...

Security Bulletin: Vulnerability in IBM Rational ClearQuest Help System (CVE-2013-0467 & CVE-2013-0599)

Summary IBM Eclipse Help System IEHS is a component bundled with IBM Rational ClearQuest. It is used to display the Rational ClearQuest web-based help content when the Rational ClearQuest Help web application is deployed to IBM WebSphere Application Server. Vulnerability Details | Subscribe to My...

Security Bulletin: Vulnerabilities in IBM Rational Insight Help System (CVE-2013-0464, CVE-2013-0467 & CVE-2013-0599)

Summary IBM Eclipse Help System IEHS is a component bundled with IBM Rational Insight. It is used to display the Rational Insight web-based help content when the Rational Insight Help web application is deployed to IBM WebSphere Application Server. Vulnerability Details | Subscribe to My...

Security Bulletin: Multiple security vulnerabilities exist in WebSphere Transformation Extender (CVE-2013-5802 CVE-2013-4002 CVE-2013-5825 CVE-2013-5372 CVE-2013-0599 CVE-2013-0464 CVE-2013-0467 CVE-2013-2962 CVE-2013-2415)

Summary WebSphere Transformation Extender products are affected by multiple security vulnerabilities that exist in Oracle JRE and IBM Eclipse Help System. Additionally, WTX Launcher is vulnerable to a denial of service attack using a buffer overflow. Vulnerability Details WebSphere Transformation...

IBM Eclipse Help System (IEHS) Cross-Site Scripting Vulnerability

Exploit for windows platform in category remote exploits IBM Eclipse Help System IEHS Cross-Site Scripting Vulnerability + Author: Filippo Roncari + Target: IBM Eclipse Help System IEHS + Version: 6.1.0 = 6.1.0.6, 6.1.5 = 6.1.5.3, 7.0 = 7.0.0.2, 8.0 8.0.0.1 + Vendor: http://www.ibm.com +...

IBM Eclipse Help System (IEHS) Cross Site Scripting

IBM Eclipse Help System IEHS Cross-Site Scripting Vulnerability + Author: Filippo Roncari + Target: IBM Eclipse Help System IEHS + Version: 6.1.0 = 6.1.0.6, 6.1.5 = 6.1.5.3, 7.0 = 7.0.0.2, 8.0 8.0.0.1 + Vendor: http://www.ibm.com + Accessibility: Remote + Severity: Medium + CVE: CVE-2014-0917 +...

PT-2015-4477

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 4.0 through 5.0.2 IBM Rational Quality Manager versions 4.0 through 4.0.7 and 5.0 through 5.0.2 IBM Rational Team Concert versions 4.0 through 4.0.7 and 5.0 through 5.0.2 IBM Rational...

Multiple IBM Rational Products Jazz Help System Information Disclosure Vulnerabilities

IBM Rational CLM, Rational Team Concert RTC, and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions; Rational Quality Manager RQM is a set of collaborative, Web-based quality management solutions; Rational Requirements Composer and Rational DOORS Next Generati...

Cisco Wireless LAN Controller HTML Help System Cross-Site Scripting Vulnerability

HTML help system on Cisco Wireless LAN Controller WLC is a set of HTML help system for use in Wireless LAN Controller WLC devices from Cisco. A cross-site scripting vulnerability exists in the HTML help system on Cisco WLC devices prior to version 8.0. A remote attacker could exploit this...

CVE-2015-0690: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the HTML help system on Cisco Wireless LAN Controller WLC devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178...

PT-2015-4812

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices versions prior to 8.0 Description A cross-site scripting XSS issue exists in the HTML help system, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. An unauthenticated...