200 matches found
Cross site scripting
The WebMail components Crystal, pronto, and pronto4 in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via 1 the location or details field of a Google Calendar invitation, 2 a crafted Outlook.com calendar aka Hotmail Calendar invitation, 3 e-mail granting access to a directory that h...
CommuniGatePro 6.1.16 Cross Site Scripting Vulnerability
CommuniGatePro version 6.1.16 suffers from multiple stored cross site scripting vulnerabilities. Exploit Title: CommuniGatePro webmails Multiple Stored XSS Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link:...
CommuniGatePro 6.1.16 Cross Site Scripting
Exploit Title: CommuniGatePro webmails Multiple Stored XSS Date: 15/11/2017 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link: http://www.stalker.com/ paid product Version: 6.1.16 Tested on: production server on crystal, pron...
CommuniGatePro 6.1.16 - Cross-Site Scripting
Exploit Title: CommuniGatePro webmails Multiple Stored XSS Date: 15/11/2017 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link: http://www.stalker.com/ paid product Version: 6.1.16 Tested on: production server on crystal, pron...
EasyMail - Gmail and Hotmail - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application EasyMail - Gmail and Hotmail published at the 'play' market has multiple vulnerabilities...
Windows Live Hotmail PUSH mail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Windows Live Hotmail PUSH mail published at the 'play' market has multiple vulnerabilities...
POP Peeper 4.0.1 Code Execution
Document Title: =============== POP Peeper 4.0.1 - Persistent Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-11-26 Vulnerability Laboratory ID VL-ID: ====================================...
POP Peeper 4.0.1 - Persistent Code Execution Vulnerability
Document Title: =============== POP Peeper 4.0.1 - Persistent Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-11-26 Vulnerability Laboratory ID VL-ID: ====================================...
The sword refers to the Android and iOS system DoubleDirect middle attack-vulnerability warning-the black bar safety net
A security researcher found a new man in the middle attack technique, it targets mostly run of the Android system and iOS system of smartphone and tablets. This is called DoubleDirect of art belonging to the middleman（MITM attack. An attacker can use this technique to put the victim to visit...
CVE-2014-5854
The Windows Live Hotmail PUSH mail aka com.clearhub.wl application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Windows Live Hotmail PUSH mail aka com.clearhub.wl application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5854
The Windows Live Hotmail PUSH mail aka com.clearhub.wl application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5854
The CVE-2014-5854 entry concerns the Windows Live Hotmail PUSH mail app (com.clearhub.wl) for Android, version 1.00.97, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...
aForum <= 1.32 (CommonAbsDir) Remote File Inclusion Vulnerability
No description provided by source. AForum =1.33 Remote file inclusion Func.php Download Script : http://www.agner.org/software/msgbrd2/aforum.zip Thanks Str0ke D0rk:allintitle:List of messageboards Exploit : http://localhost/aforumpath/common/func.php?CommonAbsDir=shell.txt? Discovered By : ThE...
PHPOF <= 20040226 (DB_adodb.class.php) RFI Vulnerability
No description provided by source. Phpof Remote file inclusion Download script : http://www.phpof.org/phpof-20040226.tar.bz2 Thx Str0ke Exploit : http://victime.com/phpofpath/dbmodules/DBadodb.class.php?PHPOFINCLUDEPATH=shell.txt? Discoverd by ThE TiGeR MiroTiger100atHotmail.com milw0rm.com...
All Club CMS <= 0.0.2 - Remote DB Config Retrieve Exploit
No description provided by source. !/usr/bin/perl =about All Club CMS = 0.0.2 Remote DB Config Retrieve Exploit ------------------------------------------------------- by athos - stakerathotmaildotit download on http://sourceforge.net ------------------------------------------------------- Usage:...
Dyncms <= Release 6 (x_admindir) Remote File Include Vulnerability
No description provided by source. ============================================================================================== Dyn CMS = REleased xadmindir Remote File Inclusion Exploit =============================================================================================== Critical Lev...
Re-Script 0.99 Beta (listings.php op) SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...
Newswriter SW <= 1.42 (editfunc.inc.php) File Include Vulnerability
No description provided by source. ============================================================================================== Newswriter SW = 1.42 NWCONFSYSTEMserverpath Remote File Inclusion Vulnerability...
Microsoft Reads User Email without Warrant
Late last week it emerged that Microsoft had searched through the contents of a French blogger’s Hotmail account in order to track down the source of a leak of proprietary information from the Redmond, Wash., tech giant. The Electronic Frontier Foundation and transparency advocates have expressed...