1202 matches found
CVE-2020-2507 command injection vulnerability in Helpdesk
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3...
QNAP Systems Helpdesk 安全漏洞
Qnap Systems QNAP Systems Helpdesk is a helpdesk application from China Wizlink Qnap Systems. An Access Control Error vulnerability exists in QNAP Systems Helpdesk versions prior to 3.0.3, which arises from improper access control and can be exploited by an attacker to gain control of a QNAP devi...
PT-2021-11105 · Qnap Systems · Qnap Helpdesk
Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Helpdesk versions prior to 3.0.3 Description: The issue is related to improper access control, which could allow attackers to compromise the security of the software by gaining privileges or reading sensitive information. If...
Qnap Systems QNAP Systems Helpdesk 操作系统命令注入漏洞
Qnap Systems QNAP Systems Helpdesk is a helpdesk application from China Wizlink Qnap Systems. An Access Control Error vulnerability exists in QNAP Systems Inc. Helpdesk versions prior to 3.0.3, which arises from improper access control and can be exploited by an attacker to gain control of a QNAP...
Using the Manager Attribute in Active Directory (AD) for Password Resets
Creating workflows around verifying password resets can be challenging for organizations, especially since many have shifted work due to the COVID-19 global pandemic. With the numbers of cyberattacks against businesses exploding and compromised credentials often being the culprit, companies have ...
CVE-2020-25917
Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser....
Stratodesk Notouch Center Access Control Error Vulnerability
Stratodesk Notouch Center is a management software for a large number of clients and other devices from Stratodesk USA. The software supports access to, and control of, multiple ADIs from a single location and has the ability to manage X86 and Raspberry Pi devices. An access control error...
The SmartHub Tool
SmartHub v1 Created Date: 12/17/2015 Updated Date: 4/4/2016 Current Version is v1.1 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the...
File Upload Vulnerability in Kaixin Helpdesk System
The Kairos Helpdesk System is a system for dealing with day-to-day issues. A file upload vulnerability exists in the Qixing Helpdesk System. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
The vulnerability of the Clone function in the GLPI system, which handles requests, incidents, and inventory management of computer equipment, allows a hacker to execute arbitrary SQL commands.
The vulnerability of the Clone function in the GLPI system for requests, incidents, and inventory management is related to the improper elimination of special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...
SQL Injection Vulnerability in the Helpdesk Ca***.aspx Page of Qixing Helpdesk System
Qixing Helpdesk system helpdesk is the main enterprise application product of Qixing Studio, Qixing Helpdesk includes modules such as problem management, asset management, voting, etc., and supports pie charts, bar charts and other forms to give IT's work report, and timely understanding of the...
QNAP Releases Security Updates for QNAP Helpdesk
QNAP Systems has released security updates to address vulnerabilities in QNAP Helpdesk. An attacker could exploit these vulnerabilities to take control of an affected QNAP network-attached storage NAS device. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...
CVE-2020-2507
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3. Recent assessments: Assessed Attacker Value: 0...
helpdesk.conceptdraw.com Cross Site Scripting vulnerability OBB-1381700
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
deserveit.visionhelpdesk.com Cross Site Scripting vulnerability OBB-1354238
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
helpdesk-bistummainz.de Cross Site Scripting vulnerability OBB-1340645
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2018-19946
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in...
CVE-2018-19947
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later...
CVE-2018-19948
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery CSRF vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and...
CVE-2018-19946
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in...