MS16-088: Description of the security update for Outlook 2010: July 12, 2016

MS16-088: Description of the security update for Outlook 2010: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

MS16-088: Description of the security update for Outlook 2016: July 12, 2016

None None...

MS16-088: Description of the security update for Outlook 2013: July 12, 2016

MS16-088: Description of the security update for Outlook 2013: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Microsoft Office CVE-2016-3278 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Personalization Settings, Such as Outlook Signatures, Are Not Retained

Users report that certain registry settings and personalization, such as Outlook signature settings among others, are not retained after they log off and log in again...

CVE-2016-0028

CVE-2016-0028 affects Microsoft Exchange Server (OWA) and involves an information disclosure flaw in the Outlook Web Access interface. The root cause is insufficient restriction on loading IMG elements, which can allow remote attackers to track users via specially crafted HTML emails. The affecte...

CVE-2016-0028

Outlook Web Access OWA in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, aka...

MS16-079: Security Update for Microsoft Exchange Server (3160339)

The remote Microsoft Exchange Server is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple stack buffer overflow conditions exist in the Oracle Outside In subcomponent due to improper validation of user-supplied input. An unauthenticated, remote attacke...

MS16-079: Description of the security update for Exchange Server 2016 and Exchange Server 2013: June 14, 2016

None None...

MS16-070: Description of the security update for Office 2016 for Mac: June 14, 2016

None None...

X (Formerly Twitter): [Critical] - Steal OAuth Tokens

Hi, This bug is caused because of the same mis-configuration as 128119. Only this time Microsoft Outlook auth is vulnerable instead of Facebook. this time I will try to be as clear as possible. after sign up of Twitter, Twitter asks users to import contacts and it only requires on authorization -...

The latest Microsoft account authentication vulnerability analysis-vulnerability warning-the black bar safety net

British security consultant Jack Whitton in Microsoft's authentication system found a critical vulnerability, an attacker can access the user's Outlook, Azure, and Office accounts, for which Microsoft paid 1. 3 million dollar bonus. ! The vulnerability and Wesley Wineberg found in the“OAuth CSRF ...

Mails - AOL, Outlook and more - Apache license, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mails - AOL, Outlook and more published at the 'play' market has multiple vulnerabilities...

Outlook USB Sync for Android - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Outlook USB Sync for Android published at the 'play' market has multiple vulnerabilities...

DejaOffice for Outlook Sync - Apache license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application DejaOffice for Outlook Sync published at the 'play' market has multiple vulnerabilities...

Outlook Calendar Transfer Full - Base64 encoded String, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Outlook Calendar Transfer Full published at the 'play' market has multiple vulnerabilities...

Microsoft Outlook Express NNTP handler Buffer Overflow (CVE-2005-1213)

A buffer overflow vulnerability has been reported in Microsoft Outlook Express. The vulnerability is due to an insufficient boundary checking when the vulnerable product processes Network News Transfer Protocol NNTP server responses. An attacker can exploit this vulnerability to inject and execut...

apac01.safelinks.protection.outlook.com Open Redirect vulnerability

Vulnerable URL: https://apac01.safelinks.protection.outlook.com/?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 29.01.2017 Latest check for patch:| 29.01.2017 15:37 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

eur01.safelinks.protection.outlook.com Open Redirect vulnerability

Vulnerable URL: https://eur01.safelinks.protection.outlook.com/?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

na01.safelinks.protection.outlook.com Open Redirect vulnerability

Vulnerable URL: https://na01.safelinks.protection.outlook.com/?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 28.01.2017 Latest check for patch:| 28.01.2017 22:40 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...