Use of Hard-coded Cryptographic Key

Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key via the use of hardcoded cryptographic key in Encryption.cs. A local attacker can obtain decrypted credentials to other servers from hMailAdmin.exe.config file and access other hMailServer admin...

The vulnerability of the message.jsp scenario in the Apache ActiveMQ software platform’s administration web consoles allows attackers to perform cross-site scripting attacks.

The vulnerability of the message.jsp script in the Apache ActiveMQ software’s administration web consoles relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...