CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://target python poc.py https://192.168.32.130 + https://192.168.32.130 is vulnerable blog: https://rustlang.rs/posts/simple-help/...

JitBit_Helpdesk_Auth_Bypass

This repository does not have a README...

Helpdesk-Telecom-CVE-2025-64459

Preparing to download the repository 1. Update packages: sudo apt update 2. If necessary, install git: sudo apt install -y git 3. It is necessary to set up port forwarding rules. In the "Network" settings of the Debian 12.11.0 machine, click "Port Forwarding". 4. Add a rule: Name: Django; Protoco...

CVE-2026-86478-PoC

CVE-2026-86478 — JetBrains YouTrack Helpdesk: Account Takeover via Self-Asserted Email Status: PoC reconstructed as part of vulnerability research; no public exploit existed at the time. | ---|--- Product| JetBrains YouTrack self-hosted, Helpdesk component Affected| All builds before 2025.3.16125...

CVE-2026-125855

Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.3.9...

CVE-2026-125855 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.3.9...

EUVD-2026-125410

Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.3.9...

CVE-2026-125855

The Elextensions ELEX WordPress HelpDesk & Customer Ticketing System plugin (versions

nextcloud-ldap-put-isadmin

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-ldap-put-isadmin Write-up: https://abraxaslabs.tech/research/nextcloud-ldap-put-isadmin nextcloud-ldap-put-isadmin Nextcloud Server 35.0.0 - Nextcloud GmbH PUT /cloud/users/id lets a delegated Users admin...

CVE-2026-119077

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.9 via the 'form specifically the attacker-controlled ticketlabel field inside the url-encoded form string' parameter parameter. This is due ...

EUVD-2026-124996

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.9 via the 'form specifically the attacker-controlled ticketlabel field inside the url-encoded form string' parameter parameter. This is due ...

CVE-2026-119077

The ELEX WordPress HelpDesk & Customer Ticketing System plugin (versions

CVE-2026-119077 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.9 - Unauthenticated PHP Object Injection to Remote Code Execution via 'form' Parameter

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.9 via the 'form specifically the attacker-controlled ticketlabel field inside the url-encoded form string' parameter parameter. This is due ...

PT-2026-146920

Name of the Vulnerable Software and Affected Versions Elextensions ELEX WordPress HelpDesk & Customer Ticketing System versions prior to 3.3.9 Description An unsafe deserialization issue allows Object Injection when the system processes untrusted data. This flaw can be exploited remotely without...

PT-2026-146581

Name of the Vulnerable Software and Affected Versions ELEX WordPress HelpDesk & Customer Ticketing System versions prior to 3.4.0 Description An issue exists allowing PHP Object Injection, a technique where untrusted input is passed to the unserialize function, potentially leading to remote code...

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by hinhlx in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System versions = 3.3.9...

EUVD-2026-120550

Faveo Helpdesk through 2.0.3 contains an authorization bypass vulnerability in TicketController that allows authenticated agents to modify tickets outside their department by referencing raw ticket IDs. Attackers can call merge-tickets, change-owner, ticket/assign and ticket/surrender endpoints t...

CVE-2026-125387

Faveo Helpdesk through 2.0.3 contains an authorization bypass vulnerability in TicketController that allows authenticated agents to modify tickets outside their department by referencing raw ticket IDs. Attackers can call merge-tickets, change-owner, ticket/assign and ticket/surrender endpoints t...

CVE-2026-125387: faveosuite faveo-helpdesk: Faveo Helpdesk through 2.0.3 contains an authorization bypass vulnerability in TicketController that allows…

Faveo Helpdesk through 2.0.3 contains an authorization bypass vulnerability in TicketController that allows authenticated agents to modify tickets outside their department by referencing raw ticket IDs. Attackers can call merge-tickets, change-owner, ticket/assign and ticket/surrender endpoints t...

CVE-2026-125387

Faveo Helpdesk versions through 2.0.3 are vulnerable to an authorization bypass in the TicketController component. This flaw allows authenticated agents to modify tickets outside their own department by referencing raw ticket IDs. Specifically, an attacker can exploit the merge-tickets , change-o...