Lucene search
+L

1256 matches found

ATTACKERKB
ATTACKERKB
added 2021/03/29 4:15 p.m.4 views

CVE-2021-29267

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...

6.1CVSS6.4AI score0.00853EPSS
SaveExploits2References3
CVE
CVE
added 2021/03/29 3:05 p.m.55 views

CVE-2021-29267

CVE-2021-29267 affects Sherlock SherlockIM. The vulnerability is a Cross Site Scripting (XSS) issue that can be triggered by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature. Exploitation involves a malicious HTML file uploaded through the chat bot, which ...

6.1CVSS5.9AI score0.00853EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2021/03/29 3:05 p.m.29 views

CVE-2021-29267

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...

6.2AI score0.00853EPSS
SaveExploits2References2
GithubExploit
GithubExploit
added 2021/03/29 12:50 p.m.148 views

Exploit for Cross-site Scripting in Sherlockim

CVE-2021-29267 SherlockIM ChatBot XSS Suggested description...

6.1CVSS6.3AI score0.00853EPSS
SaveExploits2
The Hacker News
The Hacker News
added 2021/03/25 11:43 a.m.54 views

Forcing Self-Service Password Reset (SSPR) Registration to Increase ROI

When your organization invests in a new product or service, it is essential that you take advantage of all the features it has to offer. This will help you to maximize your return on investment ROI. If you have purchased or are thinking about purchasing a self-service password reset SSPR tool, on...

0.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/03/25 11:43 a.m.10 views

Forcing Self-Service Password Reset (SSPR) Registration to Increase ROI

When your organization invests in a new product or service, it is essential that you take advantage of all the features it has to offer. This will help you to maximize your return on investment ROI. If you have purchased or are thinking about purchasing a self-service password reset SSPR tool, on...

5.9AI score
SaveExploits0
Citrix
Citrix
added 2021/03/03 12:00 a.m.13 views

Citrix Workspace App Assistance for Non-Admins

Clickhere to download Citrix Workspace App. You have been directed to this article because you have questions about or need assistance with Citrix Workspace app and you are NOT an administrator or technical contact for your organization. As a non-admin user of Citrix Workspace app, you must conta...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2021/01/21 12:00 a.m.16 views

Solarwinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2021-05123)

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. SolarWinds Web Help Desk 12.7.0 suffers from a cross-site scripting vulnerability that...

5.4CVSS6.3AI score0.0147EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/15 2:15 p.m.9 views

CVE-2019-16961

SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name...

5.4CVSS6.1AI score0.0147EPSS
SaveExploits1References3
NVD
NVD
added 2021/01/15 2:15 p.m.37 views

CVE-2019-16961

SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name...

5.4CVSS5.2AI score0.0147EPSS
SaveExploits1References3
Prion
Prion
added 2021/01/15 2:15 p.m.13 views

Design/Logic Flaw

SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name...

3.5CVSS5.2AI score0.0147EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/01/15 1:28 p.m.42 views

CVE-2019-16961

SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name...

5.3AI score0.0147EPSS
SaveExploits1References3
CVE
CVE
added 2021/01/15 1:28 p.m.63 views

CVE-2019-16961

CVE-2019-16961 affects SolarWinds Web Help Desk 12.7.0 and is a cross-site scripting (XSS) vulnerability exploitable via a Schedule Name. The connected Red Hat/CNVD/NVD entries corroborate the same issue. The NVD metrics list a CVSS v3.1 base score of 5.4 (MEDIUM) with network attack vector, low ...

5.4CVSS5.2AI score0.0147EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/01/15 12:00 a.m.13 views

Solarwinds Web Help Desk 跨站脚本漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. SolarWinds Web Help Desk 12.7.0 suffers from a cross-site scripting vulnerability that...

5.4CVSS5.9AI score0.0147EPSS
SaveExploits1References4
CNVD
CNVD
added 2021/01/08 12:00 a.m.33 views

SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2021-01997)

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0 that...

5.4CVSS5.4AI score0.0171EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/07 12:00 a.m.9 views

SolarWinds Web Help Desk HTML Injection Vulnerability

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. An HTML injection vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct an HTML injection attack via a Comment in a Help Request work order...

5.4CVSS6.9AI score0.01327EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/06 5:15 p.m.9 views

CVE-2019-16954

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...

5.4CVSS6.1AI score0.01327EPSS
SaveExploits1References3
NVD
NVD
added 2021/01/06 5:15 p.m.14 views

CVE-2019-16954

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...

5.4CVSS5.6AI score0.01327EPSS
SaveExploits1References3
Prion
Prion
added 2021/01/06 5:15 p.m.12 views

Design/Logic Flaw

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...

4.9CVSS5.6AI score0.01327EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2021/01/06 4:53 p.m.47 views

CVE-2019-16954

CVE-2019-16954 affects SolarWinds Web Help Desk 12.7.0 with an HTML injection vulnerability via the Comment in a Help Request ticket. The provided connected documents indicate the flaw is caused by accepting user input in a Comment and injecting it into HTML, but do not provide explicit exploit s...

5.4CVSS5.6AI score0.01327EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder