libical: Multiple use-after-free vulnerabilities

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

libical: Multiple use-after-free vulnerabilities

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

tokyohash.org XSS vulnerability

Open Bug Bounty ID: OBB-434515 Description| Value ---|--- Affected Website:| tokyohash.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

demos2.softaculous.com XSS vulnerability

Open Bug Bounty ID: OBB-331255 Description| Value ---|--- Affected Website:| demos2.softaculous.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fedora 25 : php-horde-nag (2017-f14c38d58f)

nag 4.2.17 - jan SECURITY: Fix unauthorized access to task exports. - jan Fix regression when exporting single tags to iCalendar CATEGORIES. - jan Officially support PHP 7. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

flightsimcenter.eu XSS vulnerability

Vulnerable URL: http://www.flightsimcenter.eu/public/icalendar/search.php?cpath==Chiusure%2BClosures%2CCorso%2BVolere%2BVolare%2CPause%2CSimulators%2BBooking%2CTraining%2BSession=20170323=asdfa%22%27%20Type=Text%20AutoF%3CK%3Eocus%20O%3CK%3EnFocus=confirm1%20//&submit.x;=0&submit.y;=0 Details:...

Fedora 25 : php-horde-kronolith (2017-692c05119d)

kronolith 4.2.22 - jan SECURITY: Fix open redirects. - mjr Prevent broken iCalendar files from causing fatal errors Bug 14672. - jan Work around calendar servers advertising as CalDAV-capable, but ignoring CalDAV requests Bug 14662. - jan Fix displaying yesterday's event in Prior Events portal...

[SECURITY] Fedora 25 Update: php-horde-kronolith-4.2.22-1.fc25

Kronolith is the Horde calendar application. It provides web-based calendars backed by a SQL database or a Kolab server. Supported features include Ajax and mobile interfaces, shared calendars, remote calendars, invitation management iCalendar/iTip, free/busy management, resource management,...

[SECURITY] Fedora 26 Update: php-horde-kronolith-4.2.22-1.fc26

Kronolith is the Horde calendar application. It provides web-based calendars backed by a SQL database or a Kolab server. Supported features include Ajax and mobile interfaces, shared calendars, remote calendars, invitation management iCalendar/iTip, free/busy management, resource management,...

Libical Denial of Service Vulnerability (CNVD-2017-03333)

Libical is an open source implementation of the iCalendar protocol and protocol data unit . A denial of service vulnerability exists in the icalpropertynewclone function in Libical. A remote attacker can cause a denial of service reuse after release via a specially crafted ics file...

Libical heap overflow vulnerability (CNVD-2017-03332)

Libical is an open source implementation of the iCalendar protocol and protocol data unit . A heap overflow vulnerability exists in libical version 1.0. An attacker can cause a denial of service reuse after release via a specially crafted ics file...

UBUNTU-CVE-2016-5823

The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

newyorknewb.com XSS vulnerability

Vulnerable URL: http://newyorknewb.com/icalendar/phpicalendar24/search.php?cpath===20160424=666%22%20onfocus=%22alert/XSSPOSED/%22%20autofocus=%22&submit.x;=0&submit.y;=0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

SSRF Team Calendars

The following endpoint has an SSRF that can be used to enumerate internal network resources that are not publicly exposed to the internet. noformat PUT /wiki/rest/calendar-services/1.0/calendar/subcalendars.json noformat PoC Using the "Team Calendar" macro, select the "Subscribe by URL" option...

Microsoft Internet Explorer Scripting Engine Memory Corruption (MS15-124: CVE-2015-6139)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer parses an iCalendar ICS file. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Fedora Update for php-horde-Horde-Icalendar FEDORA-2015-11287

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-Horde-Icalendar FEDORA-2015-11261

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: php-horde-Horde-Icalendar-2.1.1-1.fc22

An API for dealing with iCalendar data...

[SECURITY] Fedora 21 Update: php-horde-Horde-Icalendar-2.1.1-1.fc21

An API for dealing with iCalendar data...

Novell GroupWise Internet Agent iCalendar Parsing Denial of Service - Ver2 (CVE-2011-3827)

A denial-of-service vulnerability has been reported in Novell GroupWise Internet Agent. The vulnerability is due to insufficient validation of certain data when parsing a received iCalendar message. An attacker could exploit this vulnerability by enticing a target user to open a specially crafted...