PT-2021-11321

Name of the Vulnerable Software and Affected Versions: Eclipse Platform versions 4.18 and earlier Description: The Help Subsystem in the Eclipse Platform does not authenticate active help requests to the local help web server. This allows an unauthenticated local attacker to issue active help...

CVE-2020-27225: Missing Authentication for Critical Function

In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform...

Eclipse Platform 访问控制错误漏洞

Eclipse Platform is Eclipse open source defines a set of frameworks and public services that together form the infrastructure needed to support the use of Eclipse as a component model , Rich Client Platform RCP and a comprehensive tool integration platform . Project model for managing resources ,...

Citrix Workspace App Assistance for Non-Admins

Clickhere to download Citrix Workspace App. You have been directed to this article because you have questions about or need assistance with Citrix Workspace app and you are NOT an administrator or technical contact for your organization. As a non-admin user of Citrix Workspace app, you must conta...

Monitor Google Cloud Platform (GCP) Data With InsightIDR

InsightIDR was built in the cloud to support dynamic and rapidly changing environments—including remote workers, hybrid cloud and on-premises architectures, and fully cloud environments. Today, more and more organizations are adopting multi-cloud or hybrid environments, creating increasingly more...

ShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock

It's a simple tool for test vulnerability shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as Bashdoor, is a family of security bugs in...

CVE-2021-26711

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

CVE-2021-26711

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

Design/Logic Flaw

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

CVE-2021-26711

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

CVE-2021-26711

CVE-2021-26711: A frame-injection vulnerability in the online help of Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl parameter. This is confirmed by multiple connected records referencing the same ...

CVE-2021-26711: Externally Controlled Reference to a Resource in Another Sphere

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

Redwood Report2Web 安全漏洞

Redwood Report2Web is a web platform from Redwood Corporation that provides users with automated report generation capabilities. A file inclusion vulnerability exists in Redwood Report2Web version 4.3.4.5, which originates from a vulnerability that allows remote attackers to present external...

PT-2021-17105

Name of the Vulnerable Software and Affected Versions Redwood Report2Web versions 4.3.4.5 through 4.5.3 Description A frame-injection issue in the online help of Redwood Report2Web allows remote attackers to render an external resource inside a frame via the "help/Online Help/NetHelp/default.htm"...

PT-2021-3502

Name of the Vulnerable Software and Affected Versions Hitachi Application Server V10 Manual Windows versions 10-11-01 and earlier Hitachi Application Server V10 Manual UNIX versions 10-11-01 and earlier Description The issue is related to a cross-site scripting vulnerability that exists due to...

CVE-2020-27735

An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of sandboxed arbitrary HTML and JavaScript in the user's browser...

Cross site scripting

An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of sandboxed arbitrary HTML and JavaScript in the user's browser...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 13 in index.js file in export.latestVersion function. PoC: var root = require"npm-help"; var module = "& touch JHU"; root.latestVersionmodule; Remediation There is no fixed versi...

Wing FTP 跨站脚本漏洞

Wing FTP Server is a cross-platform FTP server software. A cross-site scripting vulnerability exists in Wing FTP version 6.4.4, where an arbitrary IFRAME element can be included in a help page via a specially crafted link, which can be exploited by an attacker to execute sandbox arbitrary HTML an...

Solarwinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2021-05123)

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. SolarWinds Web Help Desk 12.7.0 suffers from a cross-site scripting vulnerability that...