IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2017-08507)

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

Lotus CC:Mail Installed (EASYPI)

Lotus CC:Mail, an unsupported and vulnerable mail application, is installed on the remote host. It is, therefore, affected by a vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code. EASYPI is one of multiple Equation Group vulnerabilities and exploits disclosed ...

shadowbroker

This repository, kaleozhou/shadowbroker, is an offensive tool repository containing exploits for various vulnerabilities in different software and systems. The exploits are categorized into several types, including SMB Server Message Block exploits, email server exploits, and others. The reposito...

IBM Lotus Domino Server Stack Buffer Overflow Vulnerability

The IBM Lotus Domino server is a WEB-based collaborative application architecture. A stack buffer overflow vulnerability exists in IBM Lotus Domino Server. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected application...

IBM Lotus Domino Server Stack Buffer Overflow Vulnerability

IBM Lotus Domino Server is prone to a stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Shadow Brokers Fix for IBM Lotus Domino Released

IBM has released a patch for Lotus Domino to plug a security flaw which was disclosed in the latest Shadow Broker revelations. Lotus Domino includes an IMAP server. IMAP or Internet Message Access Protocol is an Internet standard protocol used by e-mail clients to retrieve e-mail messages from th...

IBM Lotus Domino server mailbox name stack buffer overflow

Overview The IBM Lotus Domino server IMAP service contains a stack-based buffer overflow vulnerability in IMAP commands that refer to a mailbox name. This can allow a remote, authenticated attacker to execute arbitrary code with the privileges of the Domino server Description IBM Lotus Domino...

MS17-002: Description of the security update for SharePoint Server 2016: January 10, 2017

None None...

lotus-invest.ps XSS vulnerability

Vulnerable URL: http://www.lotus-invest.ps/more-news.php?id=7'" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27265552 VIP website status:| No Check...

CVE-2016-2991

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Protector for Mail Security 2.8.0.0 through 2.8.1.0 before 2.8.1.0-22115 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Protector for Mail Security 2.8.0.0 through 2.8.1.0 before 2.8.1.0-22115 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2991

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Protector for Mail Security 2.8.0.0 through 2.8.1.0 before 2.8.1.0-22115 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2991

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Protector for Mail Security 2.8.0.0 through 2.8.1.0 before 2.8.1.0-22115 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2991

CVE-2016-2991 relates to multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Protector for Mail Security, affecting versions 2.8.0.0 through 2.8.1.0, and fixed in 2.8.1.0-22115. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

libreoffice: Multiple out-of-bounds overflows in lwp filter

Multiple flaws were found in the Lotus Word Pro LWP document format parser in LibreOffice. By tricking a user into opening a specially crafted LWP document, an attacker could possibly use this flaw to execute arbitrary code with the privileges of the user opening the file...

IBM Lotus Protector for Mail Security Cross-Site Scripting Vulnerability

IBM Lotus Protector for Mail Security is a suite of email content filtering solutions for IBM Lotus Notes, IBM Lotus Domino, Microsoft Exchange and hybrid email environments. A cross-site scripting vulnerability exists in IBM Lotus Protector for Mail Security, which allows remote attackers to...

CVE-2016-6597

Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability...

CVE-2016-6597

Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability...

CVE-2016-6597

CVE-2016-6597 affects Sophos Mobile Control’s EAS Proxy (before 6.2.0). When Lotus Traveler is enabled, it allows a remote attacker to access arbitrary web-resources from the backend mail system via an Open Reverse Proxy. This is triggered by a crafted request to the EAS Proxy, exposing backend r...

Sophos Mobile Control 3.5.0.3 Open Reverse Proxy

Application: Sophos Mobile Control EAS Proxy Versions Affected: 3.5.0.3 Vendor URL: https://www.sophos.com/ Bugs: Open Reverse Proxy Sent: 30.06.2016 Reported: 05.07.2016 Vendor response: 13.07.2016 Published BugFix by vendor: 28.07.2016 Date of Public Advisory: 05.08.2016 Reference: Sophos Case...