PT-2024-36185 · WordPress · Hive Support – Wordpress Help Desk

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

SolarWinds Web Help Desk < 12.8.4 Multiple Vulnerabilities

The version of Solarwinds Web Help Desk installed on the remote host is prior to 12.8.4. It is, therefore, affected by multiple vulnerabilities as referenced in the 12.8.4 release notes. - Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not...

PT-2024-11741 · WordPress · Js Help Desk – Best Help Desk & Support Plugin

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions prior to 2.7.1 Description: The issue affects the JS Help Desk – Best Help Desk & Support Plugin, allowing exploitation of incorrectly configured access control security levels due to a...

PT-2024-11743 · WordPress · Js Help Desk

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.7.1 Description: The issue affects the JS Help Desk plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization...

CVE-2022-46840: Missing Authorization

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...

CVE-2022-46838: Missing Authorization

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...

PT-2024-17461 · WordPress +1 · Autoblogging Seo Help +2

Name of the Vulnerable Software and Affected Versions: AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress versions up to, and including, 6.1.3 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input...

CVE-2024-12156: Improper Neutralization of Input During Web Page Generation

The AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-45709

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...

CVE-2024-45709

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...

CVE-2024-45709 SolarWinds Web Help Desk Local File Read Vulnerability

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...

CVE-2024-45709

CVE-2024-45709 affects SolarWinds Web Help Desk. The vulnerability is a local file read flaw that requires the product to be installed on Linux and configured to use a non-default development/test mode, which limits exposure. The available sources do not specify affected versions (beyond the Linu...

CVE-2024-45709 SolarWinds Web Help Desk Local File Read Vulnerability

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...

Stable Channel Update for Desktop

The Stable channel has been updated to 131.0.6778.139/.140 for Windows, Mac and 131.0.6778.139 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

SolarWinds Web Help Desk 路径遍历漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from US-based SolarWinds. The software supports centralized knowledge base, IT asset management, project and task management, and other features. SolarWinds Web Help Desk suffers from a path traversal vulnerability tha...

CVE-2024-45709: Improper Limitation of a Pathname to a Restricted Directory

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...

MAL-2024-11278 Malicious code in @rambler-help/shared (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-51910

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ezlab Assist24 Help Desk assist24it allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through = 20150401.2...

CVE-2024-51828

CVE-2024-51828 is an XSS vulnerability affecting the WordPress plugin Beacon For Help Scout (WordPress plugin) with versions up to and including 1.3.0 . The issue is described as an Authenticated (Contributor+) Stored Cross-Site Scripting vector arising from improper neutralization of input durin...

CVE-2024-51828 WordPress Beacon For Help Scout plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Griffiths Beacon For Help Scout beacon-for-helpscout allows DOM-Based XSS.This issue affects Beacon For Help Scout: from n/a through = 1.3.0...