New Support Website - July 15th 2024

New Support Website - July 15th 2024 Support.Citrix.com is migrating to a new platform. This is the main website for hosting public CTX knowledge articles and for customers to create and view their support cases. This new platform will launch on July 15th 2024 Callback and LiveChat are dependent ...

Shopify: Subdomain takeover in help.tictail.com pointing to Zendesk (a Shopify acquisition)

Hello, Description: --------------------- The subdomain at https://help.tictail.com has an unclaimed CNAME record tictail.zendesk.com . I checked the username availability in the signup process at zendesk, it was observed that the subdomain is vulnerable to a subdomain takeover which allows an...

Pre-Installed Software Flaw Exposes Most Dell Computers to Remote Hacking

If you use a Dell computer, then beware — hackers could compromise your system remotely. Bill Demirkapi, a 17-year-old independent security researcher, has discovered a critical remote code execution vulnerability in the Dell SupportAssist utility that comes pre-installed on most Dell computers...

support.lenovo.com XSS vulnerability

Open Bug Bounty ID: OBB-678466 Description| Value ---|--- Affected Website:| support.lenovo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

support.usr.com XSS vulnerability

Open Bug Bounty ID: OBB-677144 Description| Value ---|--- Affected Website:| support.usr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

support.neo-technologies.ch XSS vulnerability

Open Bug Bounty ID: OBB-654000 Description| Value ---|--- Affected Website:| support.neo-technologies.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

support.myharmony.com XSS vulnerability

Open Bug Bounty ID: OBB-550357 Description| Value ---|--- Affected Website:| support.myharmony.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

support.malwarebytes.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-490536 Description| Value ---|--- Affected Website:| support.malwarebytes.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

support.razerzone.com XSS vulnerability

Vulnerable URL: http://support.razerzone.com/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

support.petalatino.com XSS vulnerability

Vulnerable URL: https://support.petalatino.com/page/2120/donate/1?utmsource="" @gmail.com'--" alert/OPENBUGBOUNTY/...

support.tsplus.net XSS vulnerability

Vulnerable URL: http://support.tsplus.net/file.php?key=af8zdv4t6t8j9eswlvnxfgsa9uxkjirm=1501804800=63f660cf31d4734e729e1e7a187da97924aae9dd Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

support.royalquest.ru XSS vulnerability

Vulnerable URL: http://support.royalquest.ru/file.php?key=v-lawv4t6t8j9eswlvnxfgsa9uxkjirm=1501804800=80257cc024b7ac539560d75a9e52f8d542b9d9e0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

support.danze.com XSS vulnerability

Vulnerable URL: http://support.danze.com/ci/fattach/get/964026/1494289830/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check support.danze.c...

support.eliteagentsnetwork.com XSS vulnerability

Vulnerable URL: http://support.eliteagentsnetwork.com/auth/forgot-password?lang=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

support.image-line.com XSS vulnerability

Vulnerable URL: https://support.image-line.com/login/login.php Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...

support.frontier.co.uk XSS vulnerability

Vulnerable URL: https://support.frontier.co.uk/ajax.php/faqs/search?query=%22%3E%3Csvg%2Fonload%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 22:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

RUCKUS ADVISORY ID 031813-2: User authentication bypass vulnerability in ZoneDirector administrative web interface

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 RUCKUS ADVISORY ID 031813-2 Customer release date: March 25, 2013 Public release date: May 27, 2013 TITLE User authentication bypass vulnerability in ZoneDirector administrative web interface SUMMARY An user authentication bypass vulnerability has bee...

PersianTools SQL Injection / Shell Upload

| @@@@@@@@ @@@@@@@@@ @@ @@ @@@@@ @@ @@ @@@@@@@@ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @@@ @ @ @ @ @ @ @ @ @ @ @ | | @@@@@@@@ @@@ @@@ @ @ @ @ @ @ @ @ @ @@@@@@@@ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @@@ @ | | @@@@@@@@ ...

Aruba Advisory ID: AID-42309 Management User Authentication Bypass Vulnerability When Using Public Key Based SSH Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: Management User Authentication Bypass Vulnerability When Using Public Key Based SSH Authentication. Aruba Advisory ID: AID-42309 Revision: 1.0 For Public Release on 4/23/2009...