OESA-2022-1759 eclipse security update

The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between. Security Fixes: In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to...

Security Bulletin: Vulnerabilities in Apache Log4j affect IBM Spectrum Control (CVE-2021-45105, CVE-2021-45046)

Summary There are two vulnerabilities in Apache Log4j: denial of service CVE-2021-45105 and remote code execution CVE-2021-45046. These vulnerabilities may affect IBM Spectrum Control due to its use of Log4j for logging, tracing, alerting, and the local help documentation. The fix includes Apache...

MGASA-2021-0591 Updated eclipse packages fix security vulnerability

Authenticate active help requests to the local help web server CVE-2020-27225...

Updated eclipse packages fix security vulnerability

Authenticate active help requests to the local help web server CVE-2020-27225...

Privilege Escalation

rh-eclipse is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authentication when a user request to the local help web server...

OPENSUSE-SU-2021:0485-1 Security update for eclipse

This update for eclipse fixes the following issues: - CVE-2020-27225: Authenticate active help requests to the local help web server bsc1183728. This update was imported from the SUSE:SLE-15-SP2:Update update project...

CVE-2020-27225

In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform...

KeePass 2.44 - Denial of Service (PoC)

KeePass 2.44 - Denial of Service PoC Exploit Title : KeePass 2.44 - Denial of Service PoC Product : KeePass Password Safe Version : Help About KeePass Help any local help area Drag&Drop HTML File Save the contents to html. Payload-1: DoS & Run Cmd //=0;i-- tryo+=x.c" + "harAti;catchereturn...

localhelpwanted.net XSS vulnerability

Open Bug Bounty ID: OBB-604215 Description| Value ---|--- Affected Website:| localhelpwanted.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...