rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities

Best Practical reports: RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...

CVE-2014-9163

creationtimestamp| type| source ---|---|--- 2015-02-13 13:14:12+00:00| seen| MISP/54ddf80a-7ed4-4777-8b41-8941950d210b 2020-10-09 17:12:17+00:00| seen| MISP/12e2955f-9fc0-4972-a85f-c5120e69362a 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:30:23+00:00|...

CVE-2015-0071

creationtimestamp| type| source ---|---|--- 2015-02-13 13:13:27+00:00| seen| MISP/54ddf80a-7ed4-4777-8b41-8941950d210b 2020-10-09 17:12:17+00:00| seen| MISP/12e2955f-9fc0-4972-a85f-c5120e69362a 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:51+00:00|...

CVE-2015-0016

creationtimestamp| type| source ---|---|--- 2015-02-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35983 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15004tswbproxy.rb 2020-10-09 16:45:27+00:00| see...

CURL-CVE-2014-8150 URL request injection

When libcurl sends a request to a server via an HTTP proxy, it copies the entire URL into the request and sends if off. If the given URL contains line feeds and carriage returns those are sent along to the proxy too, which allows the program to for example send a separate HTTP request injected...

CVE-2014-4404

creationtimestamp| type| source ---|---|--- 2014-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35440 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/iokitkeyboardroot.rb 2023-06-14 21:10:03+00:00| seen|...

CVE-2014-6324

creationtimestamp| type| source ---|---|--- 2014-11-18 07:00:00+00:00| seen| https://msrc.microsoft.com/blog/2014/11/additional-information-about-cve-2014-6324/ 2014-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35474 2018-05-29 15:50:33+00:00| seen|...

Open Source OpenSOC Security Analytics Framework Released

Cisco announced today that it has made available through open source a framework that integrates data analytics tools into security operations. “The OpenSOC framework helps organizations make big data part of their technical security strategy by providing a platform for the application of anomaly...

Open-Xchange Security Advisory 2014-09-15

Product: OX App Suite Vendor: Open-Xchange GmbH Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.6.0 and earlier Vulnerable component: frontend Fixed version: 7.4.2-rev33, 7.6.0-rev16 Report confidence: Confirmed Solution status: Fixed by Vendor Vendor notification: 2014-07-1...

CVE-2014-5235

Cross-site scripting XSS vulnerability in the frontend in Open-Xchange OX AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds...

Cross site scripting

Cross-site scripting XSS vulnerability in the frontend in Open-Xchange OX AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds...

CVE-2014-5235

Cross-site scripting XSS vulnerability in the frontend in Open-Xchange OX AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds...

Feed on Feeds <= 0.5 - Remote PHP Code Injection Exploit

No description provided by source. ?php / ------------------------------------------------------ Feed on Feeds = 0.5 Remote PHP Code Injection Exploit ------------------------------------------------------ author..........: EgiX mail............: n0b0d13satgmaildotcom software link...:...

Joomla QuickFAQ Component (com_quickfaq) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------- Joomla Component comquickfaq BSQL-i Vulnerability ----------------------------------------------------------------------------------------- +Title Joomla Component...

Microsoft Interflow Information-Sharing Platform Preview Open

Much like the Year of PKI that has never come to be, information sharing has been one of security’s more infamous non-starters. While successful in heavily siloed environments such as financial services, enterprises industry-wide are hesitant to share threat and security data for fear of losing a...

openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)

This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / seamonkey / etc (openSUSE-SU-2012:0567-1)

Changes in xulrunner : - update to 12.0 bnc758408 - rebased patches - MFSA 2012-20/CVE-2012-0467/CVE-2012-0468 Miscellaneous memory safety hazards - MFSA 2012-22/CVE-2012-0469 bmo738985 use-after-free in IDBKeyRange - MFSA 2012-23/CVE-2012-0470 bmo734288 Invalid frees causes heap corruption in...

Skybox Security 6.3.x - 6.4.x - Multiple Information Disclosure

Exploit for hardware platform in category web applications Exploit Title: SKYBOX Security – Multiple Information Disclosure Date: 22-Jan-2014 Exploit Author: Luigi Vezzoso Vendor Homepage: http://www.skyboxsecurity.com Version: Skybox View Appliances with ISO versions: 6.3.33-2.14, 6.3.31-2.14,...

Feeder.co RSS Feeder 5.2 Chrome - Persistent Vulnerability

Document Title: =============== Feeder.co RSS Feeder 5.2 Chrome - Persistent Vulnerability Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID: ==================================== 1119 Common Vulnerability Scoring System: ==================================== 3.8 Product &...

CVE-2013-4810

creationtimestamp| type| source ---|---|--- 2013-10-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28713 2018-12-11 15:50:28+00:00| seen| MISP/5c0fd6cc-f868-4dca-890c-1ea30a021402 2020-10-09 15:54:23+00:00| seen| MISP/22202ca2-acd7-409f-b572-f1d81bd91c48 2023-06-14...