SUSE CVE-2012-3374

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03043)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker could exploit this vulnerability via an inline image with a specially crafted...

CVE-2021-23932

OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename...

CVE-2021-23932

OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename...

Cross site scripting

OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename...

CVE-2021-23932

OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename...

CVE-2021-23932

OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename...

CVE-2021-23932

CVE-2021-23932 corresponds to an XSS vulnerability in OX App Suite up to version 7.10.4, exploitable via an inline image with a crafted filename. The connected sources confirm the vulnerability description and affected product, but do not provide any remediation details (e.g., patched version) wi...

Open-xchange OX App Suite Cross-Site Script Vulnerability

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker could exploit this vulnerability via an inline image with a specially crafted...

CVE-2021-23932: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename...

PT-2021-15618

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for cross-site scripting XSS attacks via an inline image with a crafted filename. This means an attacker could potentially inject malicious scripts into a website, affecti...

CVE-2014-8839

Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages" configuration, which allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this image's URL...

PT-2015-4105

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2 Description The issue allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this image's URL, due to the failure of...

CoreGraphics Information Disclosure - CVE-2014-4378

This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fails to validate input when parsing the colorspace...

V-CMS PHP File Upload and Execute

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

CVE-2012-3374

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

DEBIAN-CVE-2012-3374

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

Buffer overflow

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

CVE-2012-3374

Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message...

PT-2011-5128

Name of the Vulnerable Software and Affected Versions AutoSec Tools V-CMS version 1.0 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the includes/inline image upload.php script, and then accessing it via a direct request...