Mozilla: Data from Pocket server improperly sanitized before execution (MFSA 2016-94, MFSA 2016-95)

HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" unprivileged page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR 45.6 and Firefox...

UBUNTU-CVE-2016-9901

HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" unprivileged page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR 45.6 and Firefox...

CVE-2016-9901

HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" unprivileged page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR 45.6 and Firefox...

Cisco Unified Communications Manager IM and Presence Service Information Disclosure Vulnerability (CNVD-2016-12548)

Cisco Unified Communications Manager IM and Presence Service is a Cisco Unified Communications Manager Instant Messaging business service. A security vulnerability in the Cisco Unified Communications Manager IM and Presence Service WEB management interface allows remote attackers to exploit the...

PT-2016-3194

Name of the Vulnerable Software and Affected Versions IBM MQ Appliance versions 8.0 through 9.0 Description The issue allows an authenticated messaging administrator to execute arbitrary commands on the system due to command execution. This is caused by the failure to neutralize special elements...

[SECURITY] Fedora 23 Update: dbus-1.10.12-1.fc23

D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...

Symantec Messaging Gateway v10. 6. 1 arbitrary file read vulnerability

No description provided by source...

InTerCyber company in the message in the system discovered a serious vulnerability-a vulnerability warning-the black bar safety net

According to foreign media the latest report, information security company InTheCyber Security Studies experts discovered a serious vulnerability, this vulnerability or can affect the message system security. Note that this vulnerability using the method is not difficult, an attacker can easily...

Bumble: Leave inaccessible messaging system with a message (https://us1.badoo.com)

Hello, to test the messaging system I found a vulnerability that allows Inaccessible leave mensajaria system to another user only required to send a message. The vulnerability is in the system as the mobile version smiles and app do not have that system is only vulnerable version desktop VULNERAB...

CVE-2016-6445

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of the Cisco Meeting Server CMS before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XM...

How to Safely Remove Android Traybar Icon in XenMobile

This article describes how to safely remove Android traybar icon in XenMobile. Background XenMobile has a lot of great policies to manageyour users' mobile devices. I'm going to discuss one in particular that can be a little tricky. We'll be updating our documentation to cover this in a bit more...

Trend Micro Local Elevation of Privilege Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSA is an email gateway security appliance from Trend Micro that integrates anti-virus, anti-spyware and anti-phishing technologies to provide comprehensive protection for email applications. A local elevation of privilege vulnerability...

iCloud Phishing Campaign Zycode Back From the Dead

A phishing campaign aimed at Chinese Apple users that was thought to be in hibernation has been roused from its slumber. Researchers in June spotted the campaign, dubbed Zycode, targeting Apple iCloud users. A rash of suspended domains that month led to a lull for the campaign however; researcher...

CVE-2016-3298: Undefined Security Weakness

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure...

[SECURITY] Fedora 24 Update: dbus-1.11.6-1.fc24

D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...

Microsoft Internet Messaging API Information Disclosure Vulnerability (3196067)

This host is missing a moderate security update according to Microsoft Bulletin MS16-126. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-126: Description of the security update for Microsoft Internet Messaging API: October 11, 2016

None None...

MS16-126: Security update for Microsoft Internet Messaging API: October 11, 2016

Resolves a vulnerability in Windows that could allow information disclosure when the Microsoft Internet Messaging API improperly handles objects in memory.SummaryThis security update resolves a vulnerability in Microsoft Windows. An information disclosure vulnerability exists when the Microsoft...

Subpoena for Signal Messaging Data Renders Little

Open Whisper Systems, the non-profit group behind the encrypted messaging app Signal, was served with a subpoena for user data earlier this year but since the company keeps such little information on its users, it was unable to produce most of what it was asked for. The American Civil Liberties...

Symantec Messaging Gateway Directory Traversal Vulnerability (SYM16-016) - Active Check

Symantec Messaging Gateway is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...