521 matches found
CVE-2017-4896
Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data...
CVE-2017-4896
Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data...
CVE-2017-4896
CVE-2017-4896 affects VMware Airwatch Inbox for Android, where a rooted device may decrypt local app data, enabling potential confidential data disclosure. The vulnerability stems from weaknesses in local data protection within the Airwatch Inbox component. Affected software is Airwatch Inbox for...
CVE-2017-4896: Undefined Security Weakness
Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data...
PT-2017-16187
Name of the Vulnerable Software and Affected Versions Airwatch Inbox for Android affected versions not specified Description The issue may allow a rooted device to decrypt local data used by the application, potentially resulting in unauthorized disclosure of confidential data. Recommendations At...
VMWare Airwatch Inbox for Android Local Security Bypass Vulnerability
VMWare Airwatch Inbox for Android is a suite of email clients for the Android platform from VMware. A security bypass vulnerability exists in VMWare Airwatch Inbox for Android. A local attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
Joomla! Component JE Messanger - SQL Injection
Joomla! Component JE Messanger - SQL Injection Exploit Title: Joomla! Component JE Messanger - SQL Injection Google Dork: inurl:index.php?option=comjemessenger Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...
VMware Releases Security Updates
VMware has released security updates to address vulnerabilities in Airwatch Agent, Airwatch Console, and AirWatch Inbox software. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review...
XSS in pull request inbox
A potential XSS issue was identified in the pull request inbox, and has been fixed in Bitbucket Server 4.12.1...
XSS in pull request inbox
A potential XSS issue was identified in the pull request inbox, and has been fixed in Bitbucket Server 4.12.1...
CVE-2016-6856
Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...
CVE-2016-6856
Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...
CVE-2016-6856
Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...
CVE-2016-6856: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...
PT-2016-7147
Name of the Vulnerable Software and Affected Versions SAP Hybris versions prior to 6.0 Description The issue is related to a cross-site scripting XSS vulnerability in the Inbox Search feature of the Hybris Management Console HMC. This vulnerability allows remote attackers to inject arbitrary web...
Yahoo Flaw Allowed Hackers to Read Anyone's Emails
Yahoo has patched a critical security vulnerability in its Mail service that could have allowed an attacker to spy on any Yahoo user's inbox. Jouko Pynnönen, a Finnish Security researcher from security firm Klikki Oy, reported a DOM based persistent XSS Cross-Site Scripting in Yahoo mail, which i...
PizzaInn Beta 3 message-exec.php Cross Site Request Forgery
Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - message-exec.php - CSRF Send Inbox Message. Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email :------------------------ : [email protected] Google Dork...
PizzaInn Beta 3 Cross Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - message-exec.php - CSRF Send Inbox Message. Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email...
Legal Robot: Email spoofing-fake mail from your mail domain server
Hiii THERE Vulnerability Title There are few email spoofing tool is available free.one them is http://emkei.cz/ Description when I tried to send a email from [email protected] to my email ,it was successful but when i tried to send the another from [email protected] , i did not receive any...
Gratipay: Avoid "resend verification email" confusion
Let's assume Alice has a Gratipay account https://gratipay.com/alice and an [email protected] email 1. Mallory creates an a1[email protected] email address, base64-encodes it, and sends Alice a link https://gratipay.com/alice/emails/verify.html?email2=YTFpY2VAZm9vLmNvbQ&nonce=x 2. When Alice opens the...