EUVD-2015-7580

Malware in sbrugna...

EUVD-2015-7581

Malware in sbrugna...

CVE-2015-7679

Cross-site scripting XSS vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/...

Cross site scripting

Cross-site scripting XSS vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-7678

CVE-2015-7678 affects Ipswitch MOVEit Mobile 1.2.0.962 and earlier. The issue is cross-site request forgery (CSRF) vulnerabilities that allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. The connected materials confirm the product and vulnerability cla...

CVE-2015-7679

CVE-2015-7679 is a Cross-Site Scripting (XSS) vulnerability in Ipswitch MOVEit Mobile prior to version 1.2.2. The issue allows an attacker to inject arbitrary script/HTML via the query string to the mobile/ endpoint. Connected sources specify MOVEit Mobile affected versions include 1.2.0.962 and ...

CVE-2015-7679

Cross-site scripting XSS vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/...

CVE-2015-7678

Multiple cross-site request forgery CSRF vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2016-3819

Name of the Vulnerable Software and Affected Versions Ipswitch MOVEit DMZ versions prior to 8.2 Ipswitch MOVEit Mobile versions prior to 1.2.2 Description The issue allows remote authenticated users to bypass authorization and read uploaded files. This can be achieved by providing a valid FileID ...

CVE-2015-7679: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/...

CVE-2015-7678: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2016-3822

Name of the Vulnerable Software and Affected Versions Ipswitch MOVEit Mobile versions 1.2.0.962 and earlier Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of unspecified victims. Th...

PT-2016-3823

Name of the Vulnerable Software and Affected Versions Ipswitch MOVEit Mobile versions prior to 1.2.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the query string to the "mobile/" endpoint. Recommendations For Ipswitch MOVEit Mobi...

Ipswitch MOVEit Mobile 1.2.0.962 Cross Site Scripting

Profundis Labs - Security Advisory Vulnerablity Title ================== Missing input validation vulnerability Reflected XSS Vendor: ======= Ipswitch, Inc http://www.ipswitchft.com Product: ======== MOVEit File Transfer MOVEit is an automated file transfer system that lets you manage, view,...