3465 matches found
Sysaid Technologies SysAid 跨站脚本漏洞
Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies SysAid Help Desk versions prior to 22.1.65. No information about this vulnerability is available at this time, so please stay tuned to...
Sysaid Technologies SysAid 跨站脚本漏洞
Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies SysAid Help Desk versions prior to 22.1.65. No information about this vulnerability is available at this time, so please stay tuned to...
PT-2022-25350 · Sysaid · Sysaid Help Desk
Name of the Vulnerable Software and Affected Versions: SysAid Help Desk versions prior to 22.1.65 Description: The issue allows for XSS via the Asset Dashboard. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...
Sysaid Technologies SysAid 跨站脚本漏洞
Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel.Desk is a writing, blogging and note-taking application for individual developers. A security vulnerability exists in Sysaid Technologies SysAid Help Desk versions prior to 22.1.65. No...
CVE-2022-36121
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...
CVE-2022-36121
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...
CVE-2022-36121
Blue Prism Enterprise 6.0–7.01 is affected by a vulnerability that exists when the Blue Prism Application server is misconfigured, allowing an authenticated user to reverse engineer the software and bypass access controls on the UpdateOfflineHelpData function. This enables changing the offline he...
CVE-2022-36121
An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the UpdateOfflineHelpData...
Blue Prism Enterprise 安全漏洞
Blue Prism Enterprise is an intelligent robotic process automation RPA software from Blue Prism UK. A security vulnerability exists in Blue Prism Enterprise versions 6.0 through 7.01 that originates in a misconfigured environment that exposes the Blue Prism application server, which allows an...
PT-2022-23209 · Blue Prism · Blue Prism Enterprise
Name of the Vulnerable Software and Affected Versions: Blue Prism Enterprise versions 6.0 through 7.01 Description: An issue was discovered in a misconfigured environment that exposes the Blue Prism Application server, allowing an authenticated user to reverse engineer the Blue Prism software and...
Cross-site Scripting (XSS)
jenkins is vulnerable to cross-site scripting. The vulnerability exists because the help icon does not escape the feature name that is part of its tooltip which allows an attacker to inject and execute arbitrary javascript...
Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution
Time for another Kali Linux release! – Kali Linux 2022.3. This release has various impressive updates. The highlights for Kali’s 2022.3’s release: Discord Server - Kali’s new community real-time chat option has launched! Test Lab Environment - Quickly create a test bed to learn, practice, and...
WordPress plugin JS Help Desk 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin JS...
WordPress Plugin JS Help Desk SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress plugin JS Help Desk 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin...
Command Injection
npm-help is vulnerable to command injection. The vulnerability exists in the export.latestVersion function in index.js which allows an attacker to inject and execute malicious commands...
CVE-2020-28445
This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...
Design/Logic Flaw
This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...
CVE-2020-28445
CVE-2020-28445 affects the npm-help package. The vulnerability is in the function export.latestVersion() in index.js (line 13), enabling command injection . Multiple sources describe a global impact across all versions and highlight that an attacker can inject and execute commands (as shown in th...