46 matches found
VulnCheck KEV: CVE-2025-32818
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service DoS condition...
CVE-2005-1678
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code...
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information...
The vulnerability of the SSLVPN Virtual Office service for the SonicOS operating systems allows a hacker to cause a service failure.
The vulnerability of the SSLVPN Virtual Office service for SonicOS operating systems is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...
SonicWall SonicOS DOS (SNWLID-2025-0009)
According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a denial of service vulnerability stemming from the Virtual Office interface that could allow a remote, unauthenticated attacker to crash the firewall and initiating a Denial ...
EUVD-2005-1680
Malware in sbrugna...
EUVD-2006-3836
Malware in sbrugna...
EUVD-2005-1677
Malware in sbrugna...
EUVD-2005-1679
Malware in sbrugna...
EUVD-2005-1678
Malware in sbrugna...
SonicWALL SonicOS SSLVPN 代码问题漏洞
SonicWALL SonicOS SSLVPN is a virtual private network for secure remote access from SonicWALL USA. A code issue vulnerability exists in SonicWALL SonicOS SSLVPN that originates from a null pointer dereference in the SSLVPN virtual office interface, which could result in a denial of service...
CVE-2025-32818: NULL Pointer Dereference
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service DoS condition...
CVE-2024-22395: Improper Authentication
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated attacker to associate another user's MFA mobile application...
CVE-2023-5970
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...
virtualofficebrisbane.com.au Cross Site Scripting vulnerability OBB-3773255
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The future of compliance and data governance is here: Introducing Microsoft Purview
The worldwide shift to a hybrid workplace has pushed us all to embrace ubiquitous connectivity. Those new connections have helped us become more collaborative; routinely editing and sharing documents in real-time from wherever we happen to be working. Instant messaging went from being a tool of...
smartvirtualoffice.com.sg Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1170171 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
PHPB2B网站管理系统SQL注入#2(无视防注入)
简要描述： SQL注入2 详细说明： 注入链接：/virtual-office/brand.php 注入参数：databrand 漏洞代码：（第24行开始） if isset$POST'save' && !empty$companyid $company-newCheckStatus$companyinfo'status'; if!empty$POST'data''brand' $vals = $POST'data''brand'; ifisset$POST'id' $id = intval$POST'id'; $attachment-renamefile =...
PHPB2B某处sql注入#4
简要描述： PHPB2B某处sql注入4 详细说明： PHPB2B某处sql注入 官网下载的最新版本 virtual-office/news.php 73-80行 if isset$POST'del' $result = $companynews-del$POST'newsid', $conditions; if $result flash"success"; else flash"actionfailed"; post的数据传入del函数，跟入看看。 function del$ids, $conditions = null, $table = null $delid =...
PHPB2B某处sql注入#5
简要描述： PHPB2B某处sql注入5 详细说明： 官网下载的最新版本 PHPB2B某处sql注入 virtual-office/favor.php 25-45行 ifisset$POST'do' && isset$POST'id' //check limit $typeid = 1; $flimit = $pdb-GetOne$sql = "SELECT countid FROM $tbprefixfavorites WHERE typeid='".$typeid."' AND memberid=".$thememberid; if...