Zimbra Collaboration Server Mail Interface Cross-Site Request Forgery Vulnerability

Zimbra Collaboration Server ZCS is a suite of email and collaboration solutions from Zimbra, USA. The solution provides email, contacts, calendaring, file sharing, social networking, and more. A cross-site request forgery vulnerability exists in the Mail interface of Zimbra Collaboration Server...

用友FE协作办公平台 /common/parseTree.jsp 等2处 SQL注入漏洞

No description provided by source...

collaboration.worldbank.org XSS vulnerability

Vulnerable URL: https://collaboration.worldbank.org/groups/lli-partners/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:...

Cisco IP Interoperability and Collaboration System Version Detection

This Script performs SSH based detection of Cisco IP Interoperability and Collaboration System SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ...

CVE-2016-1375

Cisco IP Interoperability and Collaboration System (IOS) 4.10(1) contains an XSS flaw in the web framework code that allows remote attackers to inject arbitrary script or HTML via a crafted URL. The vulnerability stems from insufficient XSS protections and can be exploited by convincing a user to...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Mail interface in Zimbra Collaboration Server ZCS before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest...

CVE-2015-6541

Zimbra Collaboration Server (ZCS) Mail interface is affected by CSRF in versions before 8.5. An attacker can exploit a crafted SOAP BatchRequest to change account preferences and hijack user authentication. Public PoCs/exploits exist (e.g., Exploit-DB 39500; 1337DAY) detailing remote CSRF without...

SAP NetWeaver Java AS RTC Service Information Disclosure Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A security vulnerability exists in the chat function of the RTC service in SAP NetWeaver Java AS version 7.4, which can be exploited by remote attackers to obtain...

CVE-2016-1375: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco IP Interoperability and Collaboration System 4.101 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy12339...

CVE-2015-6541: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Mail interface in Zimbra Collaboration Server ZCS before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest...

PT-2016-4744

Name of the Vulnerable Software and Affected Versions Cisco IP Interoperability and Collaboration System version 4.101 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For Cisco IP Interoperability and...

PT-2016-3717

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Server versions prior to 8.5 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Mail interface. These vulnerabilities allow remote attackers to hijack the authentication of...

CVE-2016-3973

The chat feature in the Real-Time Collaboration RTC services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tcrtccoll.appl.rtcwdchat/Chat, pressing "Add users", and doing a search, aka SAP...

CVE-2016-3973

The chat feature in the Real-Time Collaboration RTC services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tcrtccoll.appl.rtcwdchat/Chat, pressing "Add users", and doing a search, aka SAP...

Security feature bypass

The chat feature in the Real-Time Collaboration RTC services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tcrtccoll.appl.rtcwdchat/Chat, pressing "Add users", and doing a search, aka SAP...

Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of Cisco IP Interoperability and Collaboration System could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient XSS protections. An attacker could exploit this vulnerability by...

PT-2016-5785

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Java AS versions 7.1 through 7.5 Description The issue allows remote attackers to obtain sensitive user information by exploiting the chat feature in the Real-Time Collaboration RTC services. This can be done by visiting the...

CVE-2016-3973: Exposure of Sensitive Information to an Unauthorized Actor

The chat feature in the Real-Time Collaboration RTC services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tcrtccoll.appl.rtcwdchat/Chat, pressing "Add users", and doing a search, aka SAP...

Uber Bug Bounty Rewards Loyalty, Promises Transparency

Uber’s bug bounty program emerged from private beta mode yesterday, which it used as a feedback forum for participants in order to develop the public program. “This was pretty unique in its approach,” said HackerOne CTO Alex Rice. Uber’s program is built on the HackerOne platform, and Uber...

Open Source Big Data Analytics and Visualization: Lumify

Open Source Big Data Integration, Analytics, and Visualization Lumify is an open source project big data fusion, analysis, and visualization platform designed for anyone. Its intuitive web-based interface helps users discover connections and explore relationships in their data via a suite of...