EUVD-2012-4749

Malware in sbrugna...

EUVD-2010-4510

Malware in sbrugna...

EUVD-2010-4512

Malware in sbrugna...

EUVD-2012-5230

Malware in sbrugna...

EUVD-2012-5232

Malware in sbrugna...

CVE-2012-5308

Cross-site request forgery CSRF vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action...

CVE-2012-4825

Multiple cross-site scripting XSS vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 userId or 2 address parameter in a getClientConfigFile action...

CVE-2010-4551

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by omitting the Internet ID field in the person document, and then using an Apple device to 1 accept or 2 decline an invitation...

XSS vulnerability in IBM Domino

Hello 3APA3A! I want to warn you about Cross-Site Scripting vulnerability in IBM Domino. This is one from many vulnerabilities in Domino, which I've found at 03.05.2012. In previous years I wrote about multiple vulnerabilities in Lotus Domino http://securityvulns.ru/docs29277.html and Lotus Notes...

IBM Lotus Notes Traveler security vulnerabilities

Crossite scripting, CSRF...

IBM Lotus Notes Traveler security vulnerabilities

Crossite scripting, crossite request forgery, URL redirection...

BF, XSS, CSRF and Redirector vulnerabilities in IBM Lotus Notes Traveler

Hello 3APA3A! I want to warn you about Brute Force, Cross-Site Scripting, Cross-Site Request Forgery and Redirector vulnerabilities in IBM Lotus Notes Traveler. IBM are planning to release their advisory soon concerning these vulnerabilities. ------------------------- Affected products:...

CVE-2012-5308

Cross-site request forgery CSRF vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action...

CVE-2012-5308

Cross-site request forgery CSRF vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action...

CVE-2012-5308

The CVE-2012-5308 entry concerns IBM Lotus Notes Traveler (servlet/traveler) with a CSRF vulnerability that, through to version 8.5.3.3 Interim Fix 1, allows remote attackers to hijack the authentication of arbitrary users via requests that create problem reports using a getReportProblem upload a...

CVE-2012-5307

CVE-2012-5307 is described as a cross-site scripting (XSS) vulnerability in IBM Lotus Notes Traveler’s servlet/traveler code. The advisory specifies that when Firefox is used, attackers can inject arbitrary web script or HTML via the redirectURL parameter. This is a distinct issue from CVE-2012-4...

IBM Lotus Notes Traveler 8.5.3 XSS / CSRF / Brute Force

Hello list! I want to warn you about Brute Force, Cross-Site Scripting, Cross-Site Request Forgery and Redirector vulnerabilities in IBM Lotus Notes Traveler. IBM are planning to release their advisory soon concerning these vulnerabilities. ------------------------- Affected products:...

IBM Lotus Notes Traveler 8.5.1.x - Multiple Input Validation Vulnerabilities

IBM Lotus Notes Traveler 8.5.1.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/55740/info IBM Lotus Notes Traveler is prone to a URI-redirection vulnerability, multiple HTML-injection vulnerabilities and cross-site scripting vulnerabilities because it fails...

CVE-2010-4551

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by omitting the Internet ID field in the person document, and then using an Apple device to 1 accept or 2 decline an invitation...

CVE-2009-5035

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages...