CVE-2014-9905

Multiple cross-site scripting XSS vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title of an appointment or 2 contact fields...

CVE-2016-6191

Multiple cross-site scripting XSS vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Description, 2 Location, 3 URL, or 4 Title field...

CVE-2014-9905

Multiple cross-site scripting XSS vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title of an appointment or 2 contact fields...

CVE-2016-6191

The CVE-2016-6191 entry describes multiple XSS vulnerabilities in SOGo’s Web Calendar, specifically in the View Raw Source page. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via fields: Description, Location, URL, or Title, leading to client-side script execution. Af...

PT-2017-6404 · Inverse · Sogo

Name of the Vulnerable Software and Affected Versions: SOGo versions prior to 2.2.0 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the Web Calendar component of SOGo. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...

PT-2017-8927 · Inverse · Sogo

Name of the Vulnerable Software and Affected Versions: SOGo versions prior to 2.3.12 SOGo versions 3.x prior to 3.1.1 Description: The issue allows remote authenticated users to obtain sensitive information by reading specific fields in calendar feeds. This is due to an incomplete blacklist...

Joomla Spider Calendar Lite 3.2.16 SQL Injection

Exploit Title: Joomla! Component Spider Calendar Lite v3.2.16 - SQL Injection Google Dork: inurl:index.php?option=comspidercalendar Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy:...

Joomla Spider Calendar Lite 3.2.16 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Spider Calendar Lite v3.2.16 - SQL Injection Google Dork: inurl:index.php?option=comspidercalendar Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy:...

Joomla! Component Spider Calendar Lite 3.2.16 - SQL Injection

Exploit Title: Joomla! Component Spider Calendar Lite v3.2.16 - SQL Injection Google Dork: inurl:index.php?option=comspidercalendar Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy:...

Google Calendar - BSD license, Certificates or keys found, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Google Calendar published at the 'play' market has multiple vulnerabilities...

Jtag Calendar 6.2.4

JTag Calendar versions 6.2.4 and previous Resolution: update to 6.2.5 Developer states: Fixed security issue in search functionality Update notice: https://joomlatag.com/premium-joomla-extensions/jtag-calendar-detail.html...

m.calendars.com XSS vulnerability

Vulnerable URL: http://m.calendars.com/prod201500001243.html?categoryId="-confirmOPENBUGBOUNTY-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Joomla JTAG Calendar 6.2.4 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on:...

Joomla! Component JTAG Calendar 6.2.4 - search SQL Injection

Joomla! Component JTAG Calendar 6.2.4 - search SQL Injection Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home :...

Joomla! Component JTAG Calendar 6.2.4 - 'search' SQL Injection

Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel :...

Joomla JTAG Calendar 6.2.4 SQL Injection

Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel :...

DEBIAN-CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

UBUNTU-CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

DEBIAN-CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

UBUNTU-CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...