APSB17-16 Security updates available for Adobe Experience Manager Forms

Adobe has released security updates for Adobe Experience Manager AEM Forms on Windows, Linux, Solaris and AIX. These updates resolve an important information disclosure vulnerability CVE-2017-3067 resulting from abuse of the pre-population service in AEM Forms. This issue was resolved by providin...

CVE-2016-6934

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that could be used in cross-site scripting attacks...

CVE-2016-7885

CVE-2016-7885 affects Adobe Experience Manager (AEM) versions 6.2 and earlier. The issue is a Cross-Site Request Forgery (CSRF) vulnerability, enabling an attacker to potentially perform actions on behalf of an authenticated user. The public description confirms the vulnerability type and impacte...

Microsoft's signout. live. com site there is a remote code execution vulnerability(RCE)-vulnerability warning-the black bar safety net

! Long story short: due to the Adobe product of the vulnerability and Microsoft login credentials incorrect use, leading to a malicious attacker may be in Microsoft's signout. live. com domain name for remote code execution. The so-called remote code execution vulnerability refers to the user can...

Adobe Experience Manager (AEM) Multiple Vulnerabilities (APSB16-05) - Active Check

Adobe Experience Manager AEM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Sling Framework 2.3.6 Information Disclosure

Document Title: =============== Apache Sling Framework v2.3.6 Adobe AEM CVE-2016-0956 - Information Disclosure Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1536 Adobe Bulletin:...

Adobe Experience Manager (AEM) Detection (HTTP)

HTTP based detection of Adobe Experience Manager AEM. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-0955

Cross-site scripting XSS vulnerability in Adobe Experience Manager AEM 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog...

CVE-2016-0955

CVE-2016-0955 affects Adobe Experience Manager (AEM) 6.1.0. It is a cross-site scripting (XSS) vulnerability in the Deletion popup dialog where a folder title field is mishandled, allowing a remote authenticated user to inject arbitrary web script or HTML. The issue is confirmed in multiple feeds...

Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure

Exploit for multiple platform in category web applications Document Title: =============== Apache Sling Framework v2.3.6 Adobe AEM CVE-2016-0956 - Information Disclosure Vulnerability Adobe Bulletin: https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html...

Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure

Apache Sling Framework Adobe AEM 2.3.6 - Information Disclosure Document Title: =============== Apache Sling Framework v2.3.6 Adobe AEM CVE-2016-0956 - Information Disclosure Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1536 Adobe...

Apache Jackrabbit WebDAV XXE Exploit

Exploit for java platform in category web applications !/usr/bin/env python """ Exploit Title: Jackrabbit WebDAV XXE Date: 25-05-2015 Software Link: http://jackrabbit.apache.org/jcr/ Exploit Author: Mikhail Egorov Contact: 0ang3el gmail com Website: http://0ang3el.blogspot.com CVE: CVE-2015-1833...

Apache JackRabbit - WebDAV XML External Entity

Apache JackRabbit - WebDAV XML External Entity !/usr/bin/env python """ Exploit Title: Jackrabbit WebDAV XXE Date: 25-05-2015 Software Link: http://jackrabbit.apache.org/jcr/ Exploit Author: Mikhail Egorov Contact: 0ang3el gmail com Website: http://0ang3el.blogspot.com CVE: CVE-2015-1833 Category...