Cisco Email Security Appliance Quarantine Email Rendering Vulnerability

A vulnerability in the display of email messages in the Messages in Quarantine MIQ view in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate...

Windows Process Filtering System: ProcFilter

Windows Process Filtering System ProcFilter is a process filtering system for Windows with built-in YARA integration. YARA rules can be instrumented with custom meta tags that tailor its response to rule matches. It runs as a Windows service and is integrated with Microsoft’s ETW API , making...

PowerShell Incident Response: Psrecon

Psrecon is an open source script that you can use to gather data from a remote Windows host using PowerShell v2 or later, organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushe...

Netsweeper 4.0.8 - Authentication Bypass (via Disabling of IP Quarantine)

Netsweeper 4.0.8 - Authentication Bypass via Disabling of IP Quarantine +-----------------------------------------------------------------------+ + Netsweeper 4.0.8 - Authentication Bypass Disabling of IP Quarantine + +-----------------------------------------------------------------------+...

Netsweeper 4.0.8 - Authentication Bypass (via Disabling of IP Quarantine)

+-----------------------------------------------------------------------+ + Netsweeper 4.0.8 - Authentication Bypass Disabling of IP Quarantine + +-----------------------------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com Version :...

Cisco Content Security Management Appliance Security Bypass Vulnerability

The Cisco Content Security Management Appliance is a content security management appliance. The appliance is primarily used to manage all policies, reports, audit information, etc. for email and web security appliances. The Cisco Content Security Management Appliance fails to set authentication...

CVE-2015-4322: Undefined Security Weakness

Cisco Content Security Management Appliance SMA 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, a...

PT-2015-6518

Name of the Vulnerable Software and Affected Versions Cisco Content Security Management Appliance SMA versions 8.3.6-039, 9.1.0-31, 9.1.0-103 Description The issue improperly restricts privileges after LDAP authentication, allowing remote authenticated users to access an arbitrary user's Spam...

Cisco Security Mail Appliance Email Spam Quarantine Privilege Escalation Vulnerability

A vulnerability in the email Spam Quarantine, Lightweight Directory Access Protocol LDAP authentication of the Cisco Content Security Management Appliance SMA could allow an authenticated, remote attacker to escalate privileges to those of the Spam Quarantine. The vulnerability is due to improper...

Mac OSX Safari 8.0.5 UXSS vulnerability technical analysis-vulnerability warning-the black bar safety net

Vulnerability description: The vulnerability affects version 6. 2. 6,7. 1. 6,8. 0. 61before the Apple Safari browser, the attacker can be through carefully constructed URLs to bypass the same origin policy any read the file. Vulnerability description: In the Safari browser, similar...

Fortinet FortiMail Stored XSS Vulnerability (FG-IR-15-005)

Fortinet FortiMail is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-8617

Cross-site scripting XSS vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to...

Fortinet FortiMail WebGUI XSS Vulnerability (FG-IR-15-005)

Fortinet FortiMail is prone to a cross-site scripting XSS vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fortinet FortiMail Web Action Quarantine Release Feature Cross-Site Scripting Vulnerability

Fortinet FortiMail is a mail information security appliance from the U.S. company Fita Fortinet, which provides a message filtering engine, anti-spam and threat defense. A cross-site scripting vulnerability exists in Fortinet FortiMail, which arises from the program's failure to adequately filter...

CVE-2015-0577

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...

CVE-2015-0577

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...

CVE-2015-0577

Cisco AsyncOS ISQ (IronPort Spam Quarantine) XSS: multiple vulnerabilities in the ISQ web page on ESA/SMA due to insufficient input validation, enabling remote attackers to inject arbitrary script/HTML via unspecified parameters. Root cause: input validation gaps in the web page. Impact: cross-si...

Cisco AsyncOS ISQ XSS Vulnerability

A vulnerability in the web framework of Cisco AsyncOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation of several parameters in the...

CVE-2015-0577: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...