Roundcube-CVE-2024-42008-POC

CVE-2024-42008 RoundCube XSS 漏洞利用 概述 本仓库包含针对 CVE-2024-42008 （RoundCube 网络邮件应用中的跨站脚本漏洞）的概念验证利用工具。该工具仅用于教育目的及 HackTheBox 等受控渗透测试环境。 漏洞详情 CVE-2024-42008 摘要 CVE ID ：CVE-2024-42008 类型 ：跨站脚本 XSS CVSS 评分 ：高 受影响版本 ： RoundCube ≤ 1.5.7 RoundCube 1.6.x ≤ 1.6.7 修复版本 ：1.5.8, 1.6.8+ 技术细节 该漏洞存在于...

EUVD-2017-14553

Malware in sbrugna...

NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0103)

The remote NewStart CGSL host, running version MAIN 4.05, has firefox packages installed that are affected by multiple vulnerabilities: - A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR...

Denial Of Service

Thunderbird, Firefox ESR, and Firefox are vulnerable to denial of service attacks. A remote attacker could crash the system during bidirectional unicode manipulation with CSS animations leading to denial of service conditions...

Code injection

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

CVE-2017-5449

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

CVE-2017-5449: Improper Input Validation

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

CVE-2017-5449

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...

UBUNTU-CVE-2017-5449

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird 52.1, Firefox ESR 52.1, and Firefox 53...