iTop VPN 安全漏洞

iTop VPN is a VPN software from iTop. It allows users to remain anonymous and secure with advanced Salsa20 chacha20 256-bit encryption. A security vulnerability exists in iTop VPN version 3.2, which stems from the iTopVPNmini.exe component attempting to loop through connections to the...

The vulnerability in the iTop web tool for managing IT services, related to the re-use of CSRF tokens, allows a attacker to execute a CSRF attack.

The vulnerability in the iTop IT service management web tool is related to the repeated use of CSRF tokens. Exploiting this vulnerability could allow a malicious actor to execute a CSRF attack remotely...

Malicious code in itop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b458802fee3da23646a1e857fddd5526b6b47d4b81fd22691f15e1718e990cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3982 Malicious code in itop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b458802fee3da23646a1e857fddd5526b6b47d4b81fd22691f15e1718e990cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31403

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...

CVE-2022-31403

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...

Cross site scripting

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...

CVE-2022-31403

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...

CVE-2022-31403

CVE-2022-31403 affects the IT service management platform iTop (notably v3.0.x, with the core issue reported as an XSS via /itop/pages/ajax.render.php). The Red Hat advisory confirms the existence of an XSS vulnerability in ITOP 3.0.1, with public-facing impact described as cross-site scripting. ...

CVE-2022-31403

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/pages/ajax.render.php...

ITOP Cross-Site Scripting Vulnerability (CNVD-2022-58397)

ITOP is a platform that provides all the resources needed to optimize iTop. A cross-site scripting vulnerability exists in ITOP version 3.0.1, which stems from a lack of checksum filtering of user-supplied and output data on the /itop/webservices/export-v2.php page. An attacker can exploit this...

ITOP 跨站脚本漏洞

ITOP is a platform that provides all the resources needed to optimize iTop. A security vulnerability exists in ITOP version v3.0.1, which can be exploited by an attacker to execute malicious scripts into a legitimate website or web application...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

Cross site scripting

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

CVE-2022-31402

Multiple sources corroborate that ITOP (iTop) is affected by cross-site scripting (XSS) vulnerabilities in various components and versions. The original CVE-2022-31402 notes an XSS via /itop/webservices/export-v2.php in ITOP 3.0.1. Connected PTSecurity entries expand on additional XSS issues: (1)...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

CVE-2022-31402

ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...

PT-2022-20732 · Itop +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: iTop versions 3.0.1 Description: A cross-site scripting XSS issue was discovered in iTop. The issue is related to the "/itop/webservices/export-v2.php" API endpoint. Recommendations: For iTop version 3.0.1, update to a version that contains a...

ITOP 跨站脚本漏洞

ITOP is a platform that provides all the resources needed to optimize iTop. A cross-site scripting vulnerability exists in ITOP version 3.0.1, which stems from a lack of checksum filtering of user-supplied and output data on the /itop/webservices/export-v2.php page. An attacker can exploit this...