3785 matches found
CVE-2020-13480
Verint Workforce Optimization WFO 15.2 allows HTML injection via the "send email" feature...
CVE-2020-13480
Verint Workforce Optimization WFO 15.2 allows HTML injection via the "send email" feature...
Design/Logic Flaw
Verint Workforce Optimization WFO 15.2 allows HTML injection via the "send email" feature...
CVE-2020-13480
Verint Workforce Optimization WFO 15.2 allows HTML injection via the "send email" feature...
CVE-2020-13480
The connected records confirm CVE-2020-13480 affects Verint Workforce Optimization (WFO) version 15.2 and is caused by HTML injection via the Send Email feature. The vulnerability details indicate an injection in a functional path that could affect email composition/handling within WFO. No exploi...
PT-2020-13564
Name of the Vulnerable Software and Affected Versions Verint Workforce Optimization WFO version 15.2 Description The issue allows HTML injection via the "send email" feature. This could potentially lead to malicious activities such as phishing or cross-site scripting XSS attacks, where an attacke...
CVE-2020-13480: Improper Neutralization of Input During Web Page Generation
Verint Workforce Optimization WFO 15.2 allows HTML injection via the "send email" feature...
PT-2020-13886
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions through 2.06B04 Description The issue concerns command injections in the apply.cgi endpoint via the action send log email with the keys auth acname or auth passwd, allowing an authenticated user to run arbitrary...
send-freedom.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1182782 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
AbsoluteTelnet 11.21 - (Username) Denial of Service Exploit
Exploit Title: AbsoluteTelnet 11.21 - 'Username' Denial of Service PoC Discovered by: Xenofon Vassilakopoulos Vendor Homepage: https://www.celestialsoftware.net/ Software Link : https://www.celestialsoftware.net/telnet/AbsoluteTelnet11.21.exe Tested Version: 11.21 Vulnerability Type: Denial of...
UBUNTU-CVE-2019-20797
An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by ISendPacket or ISendPacketTo in inetwork.c...
CVE-2020-11016
IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send" functionality of the Inspect-tool of the Monitor component. An attacker with access to the IntelMQ Manager could possibly use this issue...
Design/Logic Flaw
IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send" functionality of the Inspect-tool of the Monitor component. An attacker with access to the IntelMQ Manager could possibly use this issue...
PT-2020-6823 · Teeworlds +4 · Teeworlds +4
Name of the Vulnerable Software and Affected Versions: Teeworlds versions 0.7.x through 0.7.4 Teeworlds version 0.7.5 is not affected, so the range can be simplified to versions prior to 0.7.5. Corrected version: Teeworlds versions prior to 0.7.5 Description: The issue is related to insufficient...
CVE-2016-11046
An issue was discovered on Samsung mobile devices with JBP4.3, KK4.4, and L5.0/5.1 software. Because of a misused whitelist, attackers can reach the radio layer aka RIL or RILD to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 May 2016...
CVE-2017-18653: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.x software. The Email application allows attackers to send emails on behalf of any user via a broadcasted intent. The Samsung ID is SVE-2017-9357 September 2017...
PT-2020-8202
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with Android versions 4.4 through 7.x Description: An issue in the Email application on Samsung mobile devices allows attackers to send emails on behalf of any user via a broadcasted intent. Recommendations: For Android...
AIDA64 Engineer 6.20.5300 - (Report File) filename Buffer Overflow (SEH) Exploit
Exploit Title: AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow SEH Exploit Author: Hodorsec Version: v6.20.5300 Software Link: http://download.aida64.com/aida64engineer620.exe Vendor Homepage: https://www.aida64.com/products/aida64-engineer Tested on: Win7 x86 SP1 - Build 7601...
CVE-2017-5651
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...
PT-2020-2140
Name of the Vulnerable Software and Affected Versions GnuTLS versions 3.6.3 through 3.6.12 Description The issue is related to the send client hello function in the GnuTLS cryptographic library, which has shortcomings in the used cryptographic algorithms. This can allow a remote attacker to gain...