Adding Subscription Cal by URL stores user password unencrypted

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-48402. panel I discovered that calendar subscriptions not only store user credentials, but do so unencrypted!!! There is really...

Adding Subscription Cal by URL stores user password unencrypted

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-48402. panel I discovered that calendar subscriptions not only store user credentials, but do so unencrypted!!! There is really ...

Adding Subscription Cal by URL stores user password unencrypted

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-48402. panel I discovered that calendar subscriptions not only store user credentials, but do so unencrypted!!! There is really ...

Reflected Cross-Site Scripting (XSS) in Google Calendar Events WordPress Plugin

Advisory ID: HTB23235 Product: Google Calendar Events WordPress plugin Vendor: Phil Derksen Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without technical details Vendor Notification: September 17, 2014 Vendor Patch: October 7, 2014...

WordPress Google Calendar Events 2.0.1 Cross Site Scripting

Advisory ID: HTB23235 Product: Google Calendar Events WordPress plugin Vendor: Phil Derksen Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without technical details Vendor Notification: September 17, 2014 Vendor Patch: October 7, 2014...

WordPress Google Calendar Events 2.0.1 Cross Site Scripting Vulnerability

WordPress Google Calendar Events plugin version 2.0.1 suffers from a cross site scripting vulnerability. Product: Google Calendar Events WordPress plugin Vendor: Phil Derksen Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without...

Google Calendar Events < 2.0.4 - XSS

The Simple Calendar – Google Calendar Plugin WordPress plugin was affected by a XSS security vulnerability...

Square: CSRF on adding a calendar event

Signup for a free account at the URL - https://www.bookfresh.com/users/signup Authenticate to the account created above. Navigate to My Business - Settings - Account Info - Account Type - Edit Click on "Delete your account" and confirm the deletion on the next page. Notice that you receive an ema...

Square: square google calendar integration CSRF,https://squareup.com/appointments/business/settings(state parameter not checking properly)

state parameter on oauth 2 application is used to prevent csrf attack!. i have found that if i removed the state parameter on google calendar integration, the integration is still work so your so attacker can connects his google account on his victim user. HACK STEPS GET THE GOOGLE CALENDAR...

My Calendar 1.10.2 - XSS in PATH_INFO Parameter

The My Calendar WordPress plugin was affected by a XSS in PATHINFO Parameter security vulnerability...

Joomla Spider Calendar <= 3.2.6 - SQL Injection

No description provided by source. !/usr/bin/env python -- coding:utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '87242' version = '1' vulDate = '2014-08-31' author = 'anonymous' createDate =...

MS CALENDAR Cloud Service Detection

Binary data 8481.prm...

Reflected Cross-Site Scripting (XSS) in Google Calendar Events WordPress Plugin

High-Tech Bridge Security Research Lab discovered vulnerability in Google Calendar Events WordPress plugin, which can be exploited to perform Cross-Site Scripting XSS attacks against administrator of a WordPress website with vulnerable plugin. 1 Reflected Cross-Site Scripting XSS in Google Calend...

Joomla! Spider Calendar Component <= 3.2.6 SQLi Vulnerability - Active Check

Joomla! Spider Calendar Component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Information disclosure

The Girls Calendar Period&Weight aka jp.co.cybird.apps.lifestyle.cal application 3.2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5841

The Girls Calendar Period&Weight aka jp.co.cybird.apps.lifestyle.cal application 3.2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5841

The CVE-2014-5841 entry concerns the Android app Girls Calendar Period&Weight (jp.co.cybird.apps.lifestyle.cal) version 3.2.2, which fails to verify X.509 certificates from SSL servers. This improper certificate validation allows a man-in-the-middle to spoof servers and obtain sensitive informati...

Joomla! Component Spider Calendar 3.2.6 - SQL Injection

!/usr/bin/env python Exploit Title : Joomla Spider Calendar = 3.2.6 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/22329 Dork Google:...

Joomla! Component Spider Calendar 3.2.6 - SQL Injection

Joomla! Component Spider Calendar 3.2.6 - SQL Injection !/usr/bin/env python Exploit Title : Joomla Spider Calendar = 3.2.6 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link :...

Joomla Spider Calendar 3.2.6 SQL Injection

!/usr/bin/env python Exploit Title : Joomla Spider Calendar = 3.2.6 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/22329 Dork Google:...