CVE-2017-3845: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime...

CVE-2017-3844: Improper Input Validation

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are...

PT-2017-16139

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance version 11.50 Description A vulnerability in the file download functions could allow an authenticated, remote attacker to download system files that should be restricted. Recommendations For Cisco Prime...

PT-2017-16141

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 11.0 through 11.5 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...

Cisco Prime Collaboration Assurance Arbitrary File Download Vulnerability

Cisco Prime Collaboration Assurance is a video and voice services solution. An arbitrary file download vulnerability exists in Cisco Prime Collaboration Assurance. An attacker could exploit this vulnerability to download arbitrary files, obtain information, and launch further attacks...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (CNVD-2017-01992)

Cisco Prime Collaboration Assurance is a video and voice services solution. A cross-site scripting vulnerability exists in the web-based administration interface in Cisco Prime Collaboration Assurance, which arises from the program not adequately validating user-submitted input. A remote attacker...

Cisco Prime Collaboration Assurance Information Leakage Vulnerability

Cisco Prime Collaboration Assurance is a video and voice services solution. A remote information leakage vulnerability exists in Cisco Prime Collaboration Assurance. An attacker could exploit this vulnerability to obtain sensitive information and cause further attacks...

Cisco Prime Collaboration Assurance Directory Listing Unauthorized Access Vulnerability

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could...

Cisco Prime Collaboration Assurance Arbitrary File Download Vulnerability

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted. The vulnerability is due to lack of proper input validation of HTTP requests. An attacker could exploit this...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

DHS Chairman Paints Bleak U.S. Cybersecurity Picture

SAN FRANCISCO – The United States is losing ground against its adversaries as illustrated by reports of Russian and Chinese hacking of U.S. interests, and breaches against private companies such as Yahoo, said Rep. Michael McCaul R-TX, chairman of the House Committee on Homeland Security, during ...

Collabo - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy:...

Collabo - Arbitrary File Download

Collabo - Arbitrary File Download Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy: https://codecanyon.net/item/collabo-teambusiness-collaboration-network/15242543 Demo:...

Collabo - Arbitrary File Download

Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy: https://codecanyon.net/item/collabo-teambusiness-collaboration-network/15242543 Demo:...

Informatica: [marketplace.informatica.com]- Stored XSS on Image title and Edit Property

By uploading and image with the title of ".jpg and allowing anyone to edit the Document under collaboration settings, XSS can be triggered by any user attempting to edit the document. POC ==== 1. Log into marketplace and go to profile page. Select New Document 2. Choose to upload document and...

Unspecified vulnerability in Zimbra Collaboration (CNVD-2017-00887)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. Zimbra Collaboration has an unspecified vulnerability in versions prior to 8.7.0 that allows remote attackers to affec...

Multiple Unspecified Vulnerabilities in Zimbra Collaboration

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. Multiple unspecified vulnerabilities exist in Zimbra Collaboration versions prior to 8.7.0 that allow remote attackers...

Unspecified vulnerability in Zimbra Collaboration (CNVD-2017-00885)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An unspecified vulnerability exists in Zimbra Collaboration in versions prior to 8.7.0, which can be exploited by remo...

Unspecified Vulnerability in Zimbra Collaboration (CNVD-2017-00886)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An unspecified vulnerability exists in Zimbra Collaboration in versions prior to 8.7.0, which allows remote attackers ...

Multiple Cross-Site Scripting Vulnerabilities in Zimbra Collaboration

Zimbra can provide open source email server software and shared calendars. Multiple cross-site scripting vulnerabilities in versions prior to Zimbra Collaboration 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors also known as bugs 104552 and 104703...