7 matches found
GHSA-W6X9-28JW-HQ7J MagicMirror: ssrf calendar .js
Vulnerability — SSRF via ADDCALENDAR MagicMirror² calendar Analysis of the PoC exploit-ssrf-calendar.js. Target: calendar/nodehelper.js of MagicMirror², socket.io namespace /calendar. --- Identification | Field | Value | |-------|-------| | PoC file | exploit-ssrf-calendar.js | | Endpoint |...
PT-2026-77238
Name of the Vulnerable Software and Affected Versions MagicMirror² versions prior to 2.37.0 Description The ADD CALENDAR handler in defaultmodules/calendar/node helper.js accepts an attacker-controlled URL, authentication data, and selfSignedCert setting through the unauthenticated Socket.IO...
CVE-2019-19907
HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data...
PT-2019-15999 · Kopano +2 · Kopano Groupware Core +2
Name of the Vulnerable Software and Affected Versions: Kopano Groupware Core versions prior to 8.7.7 Description: The issue is related to out-of-bounds access in the HrAddFBBlock function, specifically during the parsing of ICal data. This occurs due to the mishandling of an array copy in the...
libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemorystrdupanddequote when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60.7.1...
UBUNTU-CVE-2019-11706
A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezonegetvtimezoneproperties when processing certain email messages, resulting in a crash. This vulnerability affects Thunderbird 60.7.1...
