CVE-2016-5721

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5721

Zimbra Collaboration Server before 8.7.0 has multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Root cause appears to be input handling/sanitization issues. Affected: Zimbra Collaboration before 8.7.0. Remediation: upgrade to 8...

CVE-2016-5721

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

MS16-099: Description of the security update for Word 2016: August 9, 2016

None None...

MS16-099: Description of the security update for Office 2016: August 9, 2016

None None...

Algolia: Unauthorized team members can leak information and see all API calls through /1/admin/* endpoints, even after they have been removed.

Summary ------------- Invited team members or collaborators on https://www.algolia.com/manage/applications/APPID/team can use the /1/admin/ REST endpoints to leak some information, which they should not be able to have access to. Steps to reproduce -------------- 1. Invite a new team member to yo...

Dan Kaminsky Black Hat Keynote

LAS VEGAS – There is no guarantee that the internet will succeed. And if we aren’t careful we can really screw it up. It has happened before and we can do it again. The warning comes from technologist Dan Kaminsky who says there is a need to treat the internet similarly to the way the National...

[SECURITY] Fedora 23 Update: kf5-attica-5.24.0-1.fc23

Attica is a Qt library that implements the Open Collaboration Services API version 1.4...

[SECURITY] Fedora 24 Update: kf5-attica-5.24.0-1.fc24

Attica is a Qt library that implements the Open Collaboration Services API version 1.4...

SimplE RePort wrIting and COllaboration tool: Serpico

Serpico is at its core a report generation tool but targeted at creating information security reports. When building a report the user adds “findings” from the template database to the report. When there are enough findings, click ‘Generate Report’ to create the docx with your findings. The docx...

MS16-088: Description of the security update for Word 2016: July 12, 2016

None None...

CVE-2016-1416

Cisco Prime Collaboration Provisioning 10.6 SP2 aka 10.6.0.10602 mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513...

Authentication flaw

Cisco Prime Collaboration Provisioning 10.6 SP2 aka 10.6.0.10602 mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513...

CVE-2016-1416

Cisco Prime Collaboration Provisioning 10.6 SP2 aka 10.6.0.10602 mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513...

CVE-2016-1416

CVE-2016-1416 affects Cisco Prime Collaboration Provisioning 10.6 SP2 (10.6.0.10602). The root cause is an improper implementation of LDAP authentication, allowing a remote attacker to bypass authentication and gain full administrator privileges via a crafted login attempt. Multiple connected sou...

Cisco Prime Collaboration Provisioning Lightweight Directory Access Protocol Authentication Bypass Vulnerability

Cisco Prime Collaboration Provisioning is a Web-based, next-generation communications services solution from Cisco. The solution provides IP communication services capabilities for IP telephony, voicemail, and unified communications environments. An authentication bypass vulnerability exists in t...

Cisco Prime Collaboration Provisioning Lightweight Directory Access Protocol Authentication Bypass Vulnerability

A vulnerability in the Lightweight Directory Access Protocol LDAP authentication for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to...

Blue Ling EIS wisdom collaboration platform /vote/service. aspx injection vulnerability

No description provided by source...

Blue Ling EIS wisdom collaboration platform /sm/menu_left_edit. aspx injection vulnerability

No description provided by source...

CVE-2016-1437

SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...