5648 matches found
CVE-2014-9324
CVE-2014-9324 affects OTRS Help Desk: GenericInterface access-control problems allow remote authenticated users to access and modify ticket data. Affected versions are OTRS 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3. Consequences include unauthorized ticket data access/manip...
otrs -- Incomplete Access Control
The OTRS project reports: An attacker with valid OTRS credentials could access and manipulate ticket data of other users via the GenericInterface, if a ticket webservice is configured and not additionally secured...
CVE-2014-9179
Cross-site scripting XSS vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL optional" field in a new ticket...
Cross site scripting
Cross-site scripting XSS vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL optional" field in a new ticket...
CVE-2014-9179
Cross-site scripting XSS vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL optional" field in a new ticket...
CVE-2014-9179
The CVE-2014-9179 entry concerns the WordPress plugin SupportEzzy Ticket System (version 1.2.5). The vulnerability is an XSS flaw where remote authenticated users can inject arbitrary script/HTML through the "URL (optional)" field when creating a new ticket. This is a concrete vulnerability detai...
PT-2014-8870
Name of the Vulnerable Software and Affected Versions SupportEzzy Ticket System plugin version 1.2.5 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the URL optional field in a new ticket. Recommendations For...
CVE-2014-9179: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL optional" field in a new ticket...
MGASA-2014-0477 Updated krb5 packages fix security vulnerability
The kadm5randkeyprincipal3 function in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access CVE-2014-5351...
MS14-068 Microsoft Kerberos Checksum Validation Vulnerability
This module exploits a vulnerability in the Microsoft Kerberos implementation. The problem exists in the verification of the Privilege Attribute Certificate PAC from a Kerberos TGS request, where a domain user may forge a PAC with arbitrary privileges, including Domain Administrator. This module...
CVE-2014-6324 - Microsoft Kerberos Checksum Validation Vulnerability
The Kerberos Key Distribution Center KDC in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a...
SupportEzzy Ticket System 1.2.5 - Cross Site Scripting
The supportezzy WordPress plugin was affected by a Cross Site Scripting security vulnerability...
WordPress SupportEzzy Ticket System 1.2.5 Cross Site Scripting
Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.2.5 Vendor Homepage: http://codecanyon.net/item/supportezzy-ticket-system-wordpress-plugin/8908617 Software Test Link:...
SupportEzzy Ticket System WordPress Plugin Stored XSS Vulnerability
SupportEzzy is an elegant support tickets system and faqs portal for WordPress. This is a stand-alone AngularJS app which runs on a single WordPress page of your website. This app does not interfere with your existing theme and plugins and will work with any kind of WordPress website. You can use...
WordPress SupportEzzy Ticket System Plugin 1.2.5 - Stored XSS Vulnerability
No description provided by source. Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.2.5 Vendor Homepage: http://codecanyon.net/item/supportezzy-ticket-system-wordpress-plugin/8908617 Software Test...
WordPress SupportEzzy Ticket System Plugin 1.2.5 - Stored XSS
SupportEzzy Ticket System plugin is prone to the vulnerability that allows run XSS payloads and use sample payload to test. Also, URL input is not secure. Solution Filter the input field...
WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting
WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.2.5 Vendor Homepage:...
WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting
Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.2.5 Vendor Homepage: http://codecanyon.net/item/supportezzy-ticket-system-wordpress-plugin/8908617 Software Test Link:...
SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9915)
This OpenSSL update fixes the following issues : - Session Ticket Memory Leak. CVE-2014-3567 - Build option no-ssl3 is incomplete. CVE-2014-3568 - Add support for TLSFALLBACKSCSV to mitigate CVE-2014-3566 POODLE %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...