CVE-2018-9067

The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...

Improper access control

The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...

CVE-2018-9067

The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...

CVE-2018-9067

The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...

CVE-2018-9067

The Lenovo Help Android app (versions earlier than 6.1.2.0327) had insufficient access control for certain functions, which could lead to exposure of about 400 email addresses and 8,500 IMEI. Root cause: inadequate enforcement of access controls for specific features. Impact: data exposure; CVSS ...

PT-2018-18828

Name of the Vulnerable Software and Affected Versions Lenovo Help Android app versions prior to 6.1.2.0327 Description The issue concerns insufficient access control for certain functions, potentially leading to the exposure of sensitive information, including approximately 400 email addresses an...

CVE-2018-9067: Undefined Security Weakness

The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...

PT-2018-11826

Name of the Vulnerable Software and Affected Versions Nagios Core versions 4.4.1 and earlier Description The issue is related to a NULL pointer dereference vulnerability in the qh help component. This vulnerability can be exploited by an attacker to cause a local denial-of-service condition. The...

Cross site scripting

SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting XSS vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL...

CVE-2018-1000611

SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting XSS vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL...

Integer overflow

The mintToken function of a smart contract implementation for HELP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13486

The mintToken function of a smart contract implementation for HELP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

PT-2018-9466

Name of the Vulnerable Software and Affected Versions SURFnet OpenConext EngineBlock versions 5.7.0 through 5.7.3 Description The issue allows an attacker to inject arbitrary web scripts or HTML into help and login pages via a specially crafted URL, potentially leading to a Cross Site Scripting X...

CVE-2018-1000611: Improper Neutralization of Input During Web Page Generation

SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting XSS vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL...

PT-2018-11864

Name of the Vulnerable Software and Affected Versions HELP token smart contract implementation affected versions not specified Description The issue concerns an integer overflow in the mintToken function of the smart contract implementation. This overflow allows the contract owner to set the...

CVE-2018-13486: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for HELP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Microsoft Windows: Turn off Help Experience Improvement Program

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhelpexpimprovement.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Turn off Help Experience Improvement Program users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Internet Explorer HTML Help Control 4.74 Bypass

Exploit Title: Microsoft Internet Explorer CVE-2004-1043 - HTML Help Local Zone Bypass Vulnerability : Enhanced! Google Dork: N/A Date: June, 26, 2018 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: http://www.microsoft.com/ Version: HTML Help Control...

JS Support Ticket < 2.0.6 - CSRF

The JS Help Desk – Best Help Desk & Support Plugin WordPress plugin was affected by a CSRF security vulnerability...

Security Bulletin: Cross-Site Scripting vulnerability in Business Space Help affects IBM Business Monitor - CVE-2013-0464

Summary IBM Eclipse Help System bundled with Business Space Help is vulnerable to Cross-Site Scripting CVE-2013-0464. Vulnerability Details CVEID: CVE-2013-0464 DESCRIPTION: IBM Eclipse Help System, as used in multiple IBM products, is vulnerable to cross-site scripting. A remote attacker could...