Mitel MiCollab Information Disclosure Vulnerability

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An information disclosure vulnerability exists in Mitel MiCollab versions prior to 9.2 for NuPoint Messenger. The vulnerability stems from insufficient access control. An attacker could exploit the vulnerability t...

Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password (cisco-sa-20181003-cpcp-password)

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is prior to 12.1. It is, therefore, affected by a vulnerability in the install function that could allow an unauthenticated, remote attacker to access the administrative web interface using a...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75009)

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75008)

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75010)

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

Collaborative innovation on display in Microsoft’s insider risk management strategy

The disrupted work environment, in which enterprises were forced to find new ways to enable their workforce to work remotely, changed the landscape for operations as well as security. One of the top areas of concern is managing insider risks, a complex undertaking even before the pandemic, and ev...

Collaborative innovation on display in Microsoft’s insider risk management strategy

The disrupted work environment, in which enterprises were forced to find new ways to enable their workforce to work remotely, changed the landscape for operations as well as security. One of the top areas of concern is managing insider risks, a complex undertaking even before the pandemic, and ev...

CVE-2020-35123

In Zimbra Collaboration Suite Network Edition versions 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17...

CVE-2020-35123

In Zimbra Collaboration Suite Network Edition versions 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17...

Design/Logic Flaw

In Zimbra Collaboration Suite Network Edition versions 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17...

CVE-2020-35123

The CVE-2020-35123 issue affects Zimbra Collaboration Suite Network Edition, specifically versions

WESEEK GROWI Directory Traversal Vulnerability

GROWI is a team collaboration software. A directory traversal vulnerability exists in WESEEK GROWI, which can be exploited by remote attackers to alter data by uploading specially crafted files...

Zimbra Collaboration Suite Code Issue Vulnerability

Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, USA. The product includes WebMail, Calendar, Address Book and more. A code issue vulnerability exists in Zimbra Collaboration Suite that stems from the vulnerability of the Consumer Store extension to XXE attacks...

Cisco Collaboration Server Cross-Site Scripting (CVE-2010-0641)

A cross site scripting vulnerability exists in Cisco Collaboration Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, known as Vulhub. It is an offensive tool for testing and demonstrating vulnerabilities in various software and systems. The primary purpose of Vulhub is to provide a simple and easy-to-use platform for...

A Cybersecurity Policy Agenda

The Aspen Institutes Aspen Cybersecurity Group -- Im a member -- has released its cybersecurity policy agenda for the next four years. The next administration and Congress cannot simultaneously address the wide array of cybersecurity risks confronting modern society. Policymakers in the White...

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2021-48903)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2021-45279)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint...

Microsoft Azure DevOps Server Input Validation Error Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. No details of the...