29 matches found
CVE-2019-11522
CVE-2019-11522 affects Open-Xchange OX App Suite, versions 7.10.0–7.10.2, where a frontend component vulnerability allows content spoofing that leads to Cross-Site Scripting (XSS). The in-document details identify the vulnerability as Content Spoofing (CWE-451) with the vulnerable version 7.10.1 ...
Open-Xchange OX App Suite Content Spoofing / Cross Site Scripting
Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs appsuite, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product: OX...
CVE-2018-1000530
CVE-2018-1000530 is a reservation duplicate of CVE-2018-11522; connected details show that Yosoro 1.0.4 has a stored XSS vulnerability leading to (in the exploit DB context) remote code execution via a crafted webview payload. The affected software is the Yosoro desktop app, version 1.0.4. The ro...
CVE-2018-11522
Yosoro 1.0.4 has stored XSS...
CVE-2018-11522
CVE-2018-11522 affects Yosoro 1.0.4 with a stored XSS that can be exploited to achieve Remote Code Execution. Connected sources document a payload (webview with data:text/html and a Node.js environment via nodeintegration) capable of reading /etc/passwd and exfiltrating it to a local endpoint, in...
Yosoro 1.0.4 - Remote Code Execution
Yosoro 1.0.4 - Remote Code Execution Exploit title: Yosoro 1.0.4 - Remote Code Execution Date: 2018-05-29 Exploit Author: Carlo Pelliccioni Vendor homepage: https://yosoro.coolecho.net/ Software link: https://github.com/IceEnd/Yosoro/releases/download/v1.0.4/Yosoro-darwin-x64-1.0.4.zip Version:...
Yosoro 1.0.4 Remote Code Execution
Exploit title: Yosoro 1.0.4 - Remote Code Execution Date: 2018-05-29 Exploit Author: Carlo Pelliccioni Vendor homepage: https://yosoro.coolecho.net/ Software link: https://github.com/IceEnd/Yosoro/releases/download/v1.0.4/Yosoro-darwin-x64-1.0.4.zip Version: 1.0.4 Tested on: MacOS 10.13.4 CVE:...
Yosoro 1.0.4 - Remote Code Execution Vulnerability
Exploit for macOS platform in category web applications Exploit title: Yosoro 1.0.4 - Remote Code Execution Exploit Author: Carlo Pelliccioni Vendor homepage: https://yosoro.coolecho.net/ Software link: https://github.com/IceEnd/Yosoro/releases/download/v1.0.4/Yosoro-darwin-x64-1.0.4.zip Version:...
Yosoro 1.0.4 - Remote Code Execution
Exploit title: Yosoro 1.0.4 - Remote Code Execution Date: 2018-05-29 Exploit Author: Carlo Pelliccioni Vendor homepage: https://yosoro.coolecho.net/ Software link: https://github.com/IceEnd/Yosoro/releases/download/v1.0.4/Yosoro-darwin-x64-1.0.4.zip Version: 1.0.4 Tested on: MacOS 10.13.4 CVE:...