CVE-2022-26594: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a form field's help text to 1 Forms module's form builder, or 2 App Builder module's object form...

CVE-2021-43460

An Unquoted Service Path vulnerability exists in System Explorer 7.0.0 via via a specially crafted file in the SystemExplorerHelpService service executable path...

SolarWinds Web Help Desk Installed (Windows)

Binary data solarwindswebhelpdeskinstalled.nbin...

CVE-2021-43102

A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code...

Yonyou u8 跨站脚本漏洞

Yonyou u8 is an enterprise ERP system from China's Yonyou Network Technology Yonyou. A cross-site scripting vulnerability exists in the /u8sl/WebHelp component of Yonyou u8 v13.0, which stems from a DOM-based cross-site scripting vulnerability in /u8sl/WebHelp...

PT-2022-10456 · Solarwinds · Web Help Desk

Name of the Vulnerable Software and Affected Versions: WebHelpDesk affected versions not specified Description: The issue is related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent its misuse. Recommendations: At the moment, there is no...

Solarwinds Web Help Desk 安全漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from SolarWinds USA. The software supports features such as centralized knowledge base, IT asset management, project and task management. A security vulnerability exists in SolarWinds Web Help Desk 12.7.8 and prior...

SolarWinds Web Help Desk - Web Detection

Binary data solarwindswebhelpdeskdetect.nbin...

Exploit for Files or Directories Accessible to External Parties in Glpi-Project Glpi

GLPwn A GLPI hack tool, using Apache directory listing and /...

CVE-2021-35251

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

CVE-2021-35251

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

Information disclosure

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

CVE-2021-35251

CVE-2021-35251 affects SolarWinds Web Help Desk. The issue is information disclosure caused by detailed error messages that can reveal environmental details of the installation. Connected sources indicate a public remediation path via WHD 12-7-8 release notes (patch/update). Explicit exploitation...

CVE-2021-35251: Generation of Error Message Containing Sensitive Information

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

Solarwinds Web Help Desk 信息泄露漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and other features. Solarwinds Web Help Desk suffers from an information disclosure vulnerability...

Searpy - Search Engine Tookit

1. Install git clone https://github.com/j3ers3/Searpy pip install -r requirement.txt 配置API及账号 ./config.py python Searpy -h 2. Help baidu Engine --google Using google Engine --so Using 360so Engine --bing Using bing Engine --shodan Using shodan Engine --fofa Using fofa Engine --zoomeye Using...

CVE-2022-24564

Checkmk =2.0.0p19 contains a Cross Site Scripting XSS vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user...

PT-2022-16720 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.0.0p19 and earlier Description: The issue concerns a Cross Site Scripting XSS vulnerability. It occurs when creating or editing a user attribute, where the Help Text is subject to HTML injection. This can be triggered when...

CVE-2022-24564: Improper Neutralization of Input During Web Page Generation

Checkmk =2.0.0p19 contains a Cross Site Scripting XSS vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user...

Security Bulletin: Vulnerabilities in Apache Log4j affect IBM Spectrum Control (CVE-2021-45105, CVE-2021-45046)

Summary There are two vulnerabilities in Apache Log4j: denial of service CVE-2021-45105 and remote code execution CVE-2021-45046. These vulnerabilities may affect IBM Spectrum Control due to its use of Log4j for logging, tracing, alerting, and the local help documentation. The fix includes Apache...