CVE-2005-0707

Buffer overflow in the IMAP daemon IMAP4d32.exe for Ipswitch Collaboration Suite ICS before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command...

CVE-2005-0332

Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to 1 upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or 2 delete arbitrary files via the selectfile...

Multiple eGroupware Vulnerabilities

GulfTech Security Research April 20th, 2005 Vendor : eGroupware URL : http://www.egroupware.org/ Version : Versions Prior To 1.0.0.007 Risk : Multiple Vulnerabilities Description: eGroupware is a very popular open source web based collaboration software that can be used within an intranet, or...

iDEFENSE Security Advisory 03.10.05: Ipswitch Collaboration Suite IMAP EXAMINE Buffer Overflow Vulnerability

Ipswitch Collaboration Suite IMAP EXAMINE Buffer Overflow Vulnerability iDEFENSE Security Advisory 03.10.05 www.idefense.com/application/poi/display?id=216&type=vulnerabilities March 10, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solutio...

CVE-2005-0707

Ipswitch Collaboration Suite's IMAP server (IMAP4d32.exe) is affected by a buffer overflow in the IMAP EXAMINE handler, allowing remote authenticated attackers to execute arbitrary code. The issue exists in ICS before 8.15 Hotfix 1; iDEFENSE describes a 259-byte malformed mailbox name causing sta...

CVE-2005-0707

Buffer overflow in the IMAP daemon IMAP4d32.exe for Ipswitch Collaboration Suite ICS before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command...

CVE-2005-0332

The CVE-2005-0332 entry concerns DeskNow Mail and Collaboration Server (v2.5.12) with two directory traversal flaws. The first allows remote upload (and possible JSP-based execution) through the AttachmentsKey parameter to attachment.do, enabling files to be placed outside the intended directory....

XXS in fusetalk forum

Vendor : fusetalk URL : http://www.fusetalk.com/ Version: 4.0 Risk : Cross site scripting Description: Fusetalk is a discussion forum solution that provides a powerful and simple method of web-based collaboration. Cross site scripting: The filtering script for the img src= doesnt filter " if...

CVE-2004-0650

UploadServlet in Cisco Collaboration Server CCS running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL...

CVE-2004-0650

UploadServlet in Cisco Collaboration Server CCS running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL...

CVE-2004-0650

Cisco Collaboration Server (CCS) Vulnerability CVE-2004-0650: The UploadServlet in CCS running ServletExec prior to 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL. The issue enables remote code execution with network access, reflectin...

Cisco Collaboration Server (CCS) ServletExec allows arbitrary file uploading

Overview There is a vulnerability in the ServletExec subcomponent of the Cisco Collaboration Server CCS that could allow an attacker to upload arbitrary files to the server. Description The Cisco Collaboration Server CCS is designed to provide interactive customer support web page sharing,...

Cisco Collaboration Server unauthorized access

Unauthorized users can upload any file and gain administrative privileges...

Cisco Security Advisory: Cisco Collaboration Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Collaboration Server Vulnerability Revision 1.0 For Public Release 2004 June 30 1600 UTC GMT ======================================================================== Contents ======== Summary Affected Products Details...

Cisco Collaboration Server Vulnerability

...

tikiwiki181.txt

Vendor : TikiWiki Project URL : http://www.tikiwiki.org Version : TikiWiki 1.8.1 && Earlier Risk : Multiple Vulnerabilities Description: Tiki CMS/Groupware aka TikiWiki is a powerful open-source Content Management System CMS and Groupware that can be used to create all sorts of Web applications,...

OpenBSD Exploit

HP2 advisory HP2 advisory HP2 advisory HP2 advisory HP2 advisory - | | | www.hackphreak.org | | | | Version : Hackphreak advisory 2 of many | | Author : RLoxleyhackphreak / condemnation / EHAP / RSH / ZSH soon| | Contributed : All of Team Hackphreak thanks alot & SSG | | Topic : A non-privledged...

Linux News 17.08.00

2.2.17pre17 released На ftp.kernel.org/pub/linux/kernel/peopl... доступно новой ядро из серии пре-17. Списка изменений и анонса пока нигде нет. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan Linuxconf 1.20r2 Вышла новая версия популярной и мощной утилиты, предназначенной для...

CVE-2022-45171

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site section. A remote user, authenticated to the product, can arbitrarily upload potentially dangerous files without restrictions...

KLA10863 Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration

Multiple serious vulnerabilities have been found in Zimbra Collaboration. Malicious users can exploit these vulnerabilities to inject arbitrary code. Technical details To exploit this vulnerabilities remote attackers to inject arbitrary web script or HTML via unspecified vectors. Original...