Multiple Cross-Site Scripting Vulnerabilities in Zimbra Collaboration

Zimbra can provide open source email server software and shared calendars. Multiple cross-site scripting vulnerabilities exist in versions of Zimbra Collaboration prior to 8.7.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2016-5721

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5721

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5721

Zimbra Collaboration Server before 8.7.0 has multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Root cause appears to be input handling/sanitization issues. Affected: Zimbra Collaboration before 8.7.0. Remediation: upgrade to 8...

CVE-2016-5721

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5721: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-6655

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting XSS vulnerabilities. Recommendations For...

MS16-099: Description of the security update for Word 2016: August 9, 2016

None None...

MS16-099: Description of the security update for Office 2016: August 9, 2016

None None...

Algolia: Unauthorized team members can leak information and see all API calls through /1/admin/* endpoints, even after they have been removed.

Summary ------------- Invited team members or collaborators on https://www.algolia.com/manage/applications/APPID/team can use the /1/admin/ REST endpoints to leak some information, which they should not be able to have access to. Steps to reproduce -------------- 1. Invite a new team member to yo...

Dan Kaminsky Black Hat Keynote

LAS VEGAS – There is no guarantee that the internet will succeed. And if we aren’t careful we can really screw it up. It has happened before and we can do it again. The warning comes from technologist Dan Kaminsky who says there is a need to treat the internet similarly to the way the National...

[SECURITY] Fedora 23 Update: kf5-attica-5.24.0-1.fc23

Attica is a Qt library that implements the Open Collaboration Services API version 1.4...

[SECURITY] Fedora 24 Update: kf5-attica-5.24.0-1.fc24

Attica is a Qt library that implements the Open Collaboration Services API version 1.4...

SimplE RePort wrIting and COllaboration tool: Serpico

Serpico is at its core a report generation tool but targeted at creating information security reports. When building a report the user adds “findings” from the template database to the report. When there are enough findings, click ‘Generate Report’ to create the docx with your findings. The docx...

MS16-088: Description of the security update for Word 2016: July 12, 2016

None None...

CVE-2016-1416

Cisco Prime Collaboration Provisioning 10.6 SP2 aka 10.6.0.10602 mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513...

Authentication flaw

Cisco Prime Collaboration Provisioning 10.6 SP2 aka 10.6.0.10602 mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513...

CVE-2016-1416

Cisco Prime Collaboration Provisioning 10.6 SP2 aka 10.6.0.10602 mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513...

CVE-2016-1416

CVE-2016-1416 affects Cisco Prime Collaboration Provisioning 10.6 SP2 (10.6.0.10602). The root cause is an improper implementation of LDAP authentication, allowing a remote attacker to bypass authentication and gain full administrator privileges via a crafted login attempt. Multiple connected sou...