CVE-2017-3845

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime...

Cisco Prime Collaboration Assurance Information Leakage Vulnerability

Cisco Prime Collaboration Assurance is a video and voice services solution. A remote information leakage vulnerability exists in Cisco Prime Collaboration Assurance. An attacker could exploit this vulnerability to obtain sensitive information and cause further attacks...

Cisco Prime Collaboration Assurance Arbitrary File Download Vulnerability

Cisco Prime Collaboration Assurance is a video and voice services solution. An arbitrary file download vulnerability exists in Cisco Prime Collaboration Assurance. An attacker could exploit this vulnerability to download arbitrary files, obtain information, and launch further attacks...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (CNVD-2017-01992)

Cisco Prime Collaboration Assurance is a video and voice services solution. A cross-site scripting vulnerability exists in the web-based administration interface in Cisco Prime Collaboration Assurance, which arises from the program not adequately validating user-submitted input. A remote attacker...

Cisco Prime Collaboration Assurance Arbitrary File Download Vulnerability

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted. The vulnerability is due to lack of proper input validation of HTTP requests. An attacker could exploit this...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cisco Prime Collaboration Assurance Directory Listing Unauthorized Access Vulnerability

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could...

DHS Chairman Paints Bleak U.S. Cybersecurity Picture

SAN FRANCISCO – The United States is losing ground against its adversaries as illustrated by reports of Russian and Chinese hacking of U.S. interests, and breaches against private companies such as Yahoo, said Rep. Michael McCaul R-TX, chairman of the House Committee on Homeland Security, during ...

Collabo - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy:...

Collabo - Arbitrary File Download

Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy: https://codecanyon.net/item/collabo-teambusiness-collaboration-network/15242543 Demo:...

Collabo - Arbitrary File Download

Collabo - Arbitrary File Download Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy: https://codecanyon.net/item/collabo-teambusiness-collaboration-network/15242543 Demo:...

Informatica: [marketplace.informatica.com]- Stored XSS on Image title and Edit Property

By uploading and image with the title of ".jpg and allowing anyone to edit the Document under collaboration settings, XSS can be triggered by any user attempting to edit the document. POC ==== 1. Log into marketplace and go to profile page. Select New Document 2. Choose to upload document and...

Unspecified vulnerability in Zimbra Collaboration (CNVD-2017-00885)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An unspecified vulnerability exists in Zimbra Collaboration in versions prior to 8.7.0, which can be exploited by remo...

Unspecified vulnerability in Zimbra Collaboration (CNVD-2017-00887)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. Zimbra Collaboration has an unspecified vulnerability in versions prior to 8.7.0 that allows remote attackers to affec...

Unspecified Vulnerability in Zimbra Collaboration (CNVD-2017-00886)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An unspecified vulnerability exists in Zimbra Collaboration in versions prior to 8.7.0, which allows remote attackers ...

Multiple Unspecified Vulnerabilities in Zimbra Collaboration

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. Multiple unspecified vulnerabilities exist in Zimbra Collaboration versions prior to 8.7.0 that allow remote attackers...

Unspecified vulnerability in Zimbra Collaboration (CNVD-2017-00754)

Zimbra can provide open source email server software and shared calendars. An unspecified vulnerability in Zimbra Collaboration prior to version 8.7.0 allows remote attackers to affect integrity via unknown vectors, also known as Bug 103996...

Zimbra Collaboration Cross-Site Scripting Vulnerability

Zimbra can provide open source email server software and shared calendars. A cross-site scripting vulnerability exists in Zimbra Collaboration versions prior to 8.7.0. Allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, also known as bug 103609...

Multiple Cross-Site Scripting Vulnerabilities in Zimbra Collaboration

Zimbra can provide open source email server software and shared calendars. Multiple cross-site scripting vulnerabilities in versions prior to Zimbra Collaboration 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors also known as bugs 104552 and 104703...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2017-00751)

Zimbra can provide open source email server software and shared calendars. A cross-site scripting vulnerability exists in Zimbra Collaboration versions prior to 8.7.0. Allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, also known as Bug 101813...