CVE-2023-25444 WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7...

CVE-2023-25444

CVE-2023-25444 affects the WordPress plugin JS Help Desk – Best Help Desk & Support Plugin (versions

CVE-2023-25444 WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7...

PT-2024-12057 · WordPress · Js Help Desk

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.7.7 Description: The issue allows the upload of malicious files, potentially leading to security risks. This is due to an Unrestricted Upload of File with Dangerous Type...

CVE-2023-25444: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7...

WordPress plugin JS Help Desk 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

CVE-2024-34698

FreeScout is a free, self-hosted help desk and shared mailbox. Versions of FreeScout prior to 1.8.139 contain a Prototype Pollution vulnerability in the /public/js/main.js source file. The Prototype Pollution arises because the getQueryParam Function recursively merges an object containing...

CVE-2024-34698 Prototype Pollution in getQueryParam Function (URL Query Parser)

FreeScout is a free, self-hosted help desk and shared mailbox. Versions of FreeScout prior to 1.8.139 contain a Prototype Pollution vulnerability in the /public/js/main.js source file. The Prototype Pollution arises because the getQueryParam Function recursively merges an object containing...

CVE-2024-34698

FreeScout versions prior to 1.8.139 are affected by a Prototype Pollution flaw in the getQueryParam function in /public/js/main.js. The function recursively merges user-controllable properties, enabling an attacker to inject a proto key and nested properties, which pollute the target object’s pro...

CVE-2024-34697

FreeScout (Email Receival Module) is affected by a stored HTML Injection in versions prior to 1.8.139. Unauthenticated attackers can inject HTML into received emails, enabling risks such as form hijacking, application defacement, or data exfiltration via CSS injection. The issue is addressed by u...

CVE-2024-34697 Freescout vulnerable to Stored HTML Injection in Editing Received Emails

FreeScout is a free, self-hosted help desk and shared mailbox. A stored HTML Injection vulnerability has been identified in the Email Receival Module of the Freescout Application. The vulnerability allows attackers to inject malicious HTML content into emails sent to the application's mailbox. Th...

RHEL 6 : eclipse (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - eclipse: Help Subsystem does not authenticate active help requests CVE-2020-27225 Note that Nessus has not tested f...

CVE-2023-41826

A PendingIntent hijacking vulnerability in Motorola Device Help Genie application that could allow local attackers to access files or interact with non-exported software components without permission...

CVE-2023-41826

CVE-2023-41826 — A PendingIntent hijacking vulnerability in the Motorola Device Help (Genie) app could allow a local attacker to access files or interact with non-exported components without permission. CVSSv3.1: Local attack, low complexity, no privileges required, no user interaction; confident...

CVE-2023-41818

An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs...

Motorola Device Help 安全漏洞

Motorola Device Help is a feature of Motorola USA Inc. It provides a full product lifecycle service experience. A security vulnerability exists in Motorola Device Help that stems from the presence of a hijacking vulnerability that could allow a local attacker to gain unauthorized access to files...

Motorola Device Help 安全漏洞

Motorola Device Help is a feature of Motorola USA Inc. It provides a full product lifecycle service experience. A security vulnerability exists in the Motorola Device Help Application, which stems from improper use of sensitive SD card data and could allow a local attacker to read system logs...

PT-2024-12982 · Motorola · Motorola Device Help

Name of the Vulnerable Software and Affected Versions: Motorola Device Help application affected versions not specified Description: An improper use of the SD card for sensitive data could allow a local attacker to read system logs. This issue affects the Motorola Device Help application...

CVE-2023-41826: Use of Implicit Intent for Sensitive Communication

A PendingIntent hijacking vulnerability in Motorola Device Help Genie application that could allow local attackers to access files or interact with non-exported software components without permission...

CVE-2023-41818: Storage of Sensitive Data in a Mechanism without Access Control

An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs...