EML enterprise address book management system username parameter has SQL injection vulnerability

EML enterprise address book management system to the enterprise employees at any time, any place to provide enterprise address book information, can be in the cell phone real-time view of the staff contact information, dialing the phone and so on. The EML enterprise address book management system...

WordPress EELV Newsletter 4.5 XSS / CSRF Vulnerabilities

Exploit for php platform in category web applications Document Title: =============== Wordpress EELV Newsletter v4.5 - Multiple Vulnerabilities Product & Service Introduction: =============================== Add a registration form on FrontOffice, a newsletter manager on backoffice manage skins,...

Nextcloud Server Information Disclosure Vulnerability (CNVD-2017-07533)

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. An information disclosure vulnerability exists in Nextcloud Server versions prior to 10.0.4 and versions prior to 11.0....

Open-Xchange: Resend invitation to members by Read only user(Privilege Escalation)

Hi Team, Description : ViewerRead only user of any entityEx: Address book, Folder etc. doesn't have access to permission section. This user can't make any action in permission/Invite people section. But Resending invitation HTTP request is vulnerable and it doesn't check whether the user is Owner...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Contacts component in the iOS operating system is related to deficiencies in access control for the Address Book application. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to protected information...

Session fixation

An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation...

CVE-2016-4686

An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation...

CVE-2016-4686

An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation...

CVE-2016-4686

An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation...

CVE-2016-4686

CVE-2016-4686 affects iOS prior to 10.1 in the Contacts component. The issue is an access-control flaw where an application may maintain access to the Address Book after the user revokes it in Settings. The root cause is not fully detailed in the provided documents, but Apple’s iOS 10.1 security ...

CVE-2017-3368

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Address Book. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3368

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Address Book. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Microsoft Dynamics CRM 2011 Update Rollup 15

Microsoft Dynamics CRM 2011 Update Rollup 15 We have identified a compatibility issue that occurs when you use the Microsoft Dynamics CRM 2011 Client for Outlook with Update Rollup 15 applied against a Dynamics CRM 2013 server. This issue does not affect Dynamics CRM 2011 servers. A new Update...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00641)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A remote vulnerability exists in Oracle iStore for...

[SECURITY] Fedora 24 Update: roundcubemail-1.2.3-1.fc24

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Fedora 25 : roundcubemail (2016-d361d188d9)

Version 1.2.3 - Searching in both contacts and groups when LDAP addressbook with groupfilters option is used - Fix vulnerability in handling of mail's 5th argument - Fix To: header encoding in mail sent with mail method 5475 - Fix flickering of header topline in min-mode 5426 - Fix bug where...

[SECURITY] Fedora 25 Update: roundcubemail-1.2.3-1.fc25

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Starbucks: Stored XSS in Adress Book (starbucks.com/account/profile)

Hello, I just found a stored XSS in the "Adress book menu" of a user's profile : https://www.starbucks.com/account/profile Description : XSS is happening due to the lack of filtering on the Address.FirstName parameter when you POST a new address on the URL :...

dreammail Mail Client - Address Book XSS Vulnerability

DreamMail is a professional e-mail client software for sending, receiving and managing e-mail. The Dreammail Ver 5.16.1005.1016 version of the email client suffers from a stored cross-site scripting vulnerability. Allows an attacker to insert malicious js code into a page, causing a stored...

Cygnus Ease Mail Client - Address Book Cross-Site Scripting Vulnerability

Cygnus EaseMail Client is a professional e-mail client software for sending, receiving and managing e-mails, supporting the import of certificates and encrypted sending. The Cygnus Mail client is vulnerable to a cross-site scripting vulnerability. Allows an attacker to insert malicious js code in...