4178 matches found
CVE-2021-28207
The specific function in ASUS BMC’s firmware Web management page Get Help file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...
CVE-2021-24212
The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...
CVE-2021-24212
The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...
Design/Logic Flaw
The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...
CVE-2021-24212
The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...
CVE-2021-24212 WooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCE
The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...
CVE-2021-24212
The WooCommerce Help Scout WordPress plugin (
WordPress 代码问题漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A code issue vulnerability exists in the...
CVE-2021-24212: Unrestricted Upload of File with Dangerous Type
The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...
PT-2021-15757
Name of the Vulnerable Software and Affected Versions: WooCommerce Help Scout WordPress plugin versions prior to 2.9.1 Description: The issue allows unauthenticated users to upload any files to the site, which by default will end up in wp-content/uploads/hstmp. Recommendations: For versions prior...
How to Vaccinate Against the Poor Password Policy Pandemic
Data breaches remain a constant threat, and no industry or organization is immune from the risks. From Fortune 500 companies to startups, password-related breaches continue to spread seemingly unchecked. As a result of the volume of data breaches and cybersecurity incidents, hackers now have acce...
Error: "You cannot add apps at this time" on Receiver StoreFront
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Domain users receive the following error after logging in using Receiver for Website : “You cannot a...
FAQ: Configuring Local Access Using Receiver for HTML5 1.0
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article contains Frequently Asked Questions on configuring local access using Citrix Receiver f...
Citrix Receiver Application Icons are Unavailable from Systray
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After installing Citrix Receiver 3.0 and configuring it for PN Agent operation, users cannot configu...
OPENSUSE-SU-2021:0485-1 Security update for eclipse
This update for eclipse fixes the following issues: - CVE-2020-27225: Authenticate active help requests to the local help web server bsc1183728. This update was imported from the SUSE:SLE-15-SP2:Update update project...
CVE-2021-29267
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...
Cross site scripting
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...
CVE-2021-29267
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...
CVE-2021-29267
CVE-2021-29267 affects Sherlock SherlockIM. The vulnerability is a Cross Site Scripting (XSS) issue that can be triggered by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature. Exploitation involves a malicious HTML file uploaded through the chat bot, which ...