CVE-2024-28228

In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...

CVE-2024-28228

JetBrains YouTrack before 2024.1.25893 is affected. The vulnerability arises in the HelpDesk component, allowing a remote attacker to create comments on behalf of an arbitrary user in HelpDesk. This can enable impersonation within issue discussions. Affected product: JetBrains YouTrack; vulnerabl...

JetBrains YouTrack Security Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2024.1.25893, which...

PT-2024-2099 · Jetbrains · Jetbrains Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.1.25893 Description: The issue is related to authentication bypass via spoofing, allowing a remote attacker to create comments on behalf of an arbitrary user. This can be exploited in the HelpDesk...

CVE-2024-1932

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932

CVE-2024-1932 affects the Freescout project (freescout-helpdesk/freescout). The entry describes an Unrestricted Upload of File with Dangerous Type vulnerability in Freescout, enabling upload of dangerous files. Multiple sources (NVD, Red Hat, OSV, CVE list) report a network-based issue with high ...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

4 Ways Hackers use Social Engineering to Bypass MFA

When it comes to access security, one recommendation stands out above the rest: multi-factor authentication MFA. With passwords alone being simple work for hackers, MFA provides an essential layer of protection against breaches. However, it's important to remember that MFA isn't foolproof. It can...

CVE-2024-0595

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpasgetusers function hooked via AJAX in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

CVE-2024-0596

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editorhtml function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

CVE-2024-0596 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editorhtml function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

CVE-2024-0595

CVE-2024-0595 concerns the Awesome Support – WordPress HelpDesk & Support Plugin. The issue is an unauthorized access vulnerability caused by a missing capability check in the wpas_get_users() function, triggered via AJAX, affecting all versions up to and including 6.1.7. The impact, as documente...

Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Missing Authorization via editor_html()

Description The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editorhtml function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, wit...

Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Missing Authorization via wpas_get_users()

Description The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpasgetusers function hooked via AJAX in all versions up to, and including, 6.1.7. This makes it possible for authenticated...

CVE-2023-51538

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5...

CVE-2023-51538

CVE-2023-51538 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin Awesome Support – WordPress HelpDesk & Support Plugin for versions up to 6.1.5. The connected Red Hat advisory and ENISA entries also reference this CVE/issue as CSRF affecting that plugin. The available document...

CVE-2023-51547

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...