CVE-2020-14271: Improper Neutralization of Input During Web Page Generation

HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the...

Unspecified Vulnerability in Mattermost Mobile Apps (CNVD-2020-35355)

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps versions prior to 1.26.0, which stems from the fact that sensitive information, such as server addresses and message content, is stored in local device logs and...

Information disclosure

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for sensitive information e.g., server addresses or message content...

PT-2020-10815

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 1.26.0 Description An issue was discovered where local logging is not blocked for sensitive information, such as server addresses or message content. Recommendations For versions prior to 1.26.0, update...

CVE-2020-3874

An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Messages app may reveal additional message content...

Code injection

An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Messages app may reveal additional message content...

Threat Outbreak Alert RuleID16419: Email Messages Distributing Malicious Software on July 22, 2015

Medium Alert ID: 39654 First Published: 2015 July 6 13:01 GMT Last Updated: 2015 July 23 12:37 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16419 and...

Drupal 4.x URL-Encoded Input HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16117/info Drupal is prone to an HTML injection vulnerability when handling URL-encoded HTML and script code in message content. This issue is due to a failure in the application to properly sanitize user-supplied input...

PT-2014-4400

Name of the Vulnerable Software and Affected Versions NTT DOCOMO sp mode mail application versions 6100 through 6300 for Android 4.0.x NTT DOCOMO sp mode mail application versions 6130 through 6700 for Android 4.1 through 4.4 Description The issue allows attackers to obtain sensitive information...

Wireless Carriers See Spike in Cell Phone Records Requests

Some of the nation’s largest wireless carriers say they last year collectively received some 1.3 million requests from law enforcement for customers’ phone records – a number that continues to rise. The information shared with police includes geolocation information, content of text messages,...

CVE-2005-1557

Multiple cross-site scripting XSS vulnerabilities in WebApp Guestbook PRO 3.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content of a message...

CVE-2005-1557

Multiple cross-site scripting XSS vulnerabilities in WebApp Guestbook PRO 3.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content of a message...

BasiliX Webmail 1.1 - Message Content Script Injection

BasiliX Webmail 1.1 - Message Content Script Injection source: https://www.securityfocus.com/bid/5060/info BasiliX is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. A script injection issue has been reported in BasiliX...

BasiliX Webmail 1.1 - Message Content Script Injection

source: https://www.securityfocus.com/bid/5060/info BasiliX is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. A script injection issue has been reported in BasiliX Webmail. Script commands are not filtered from the...