95 matches found
CVE-2018-14952: Improper Neutralization of Input During Web Page Generation
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...
CVE-2018-14955: Improper Neutralization of Input During Web Page Generation
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
CVE-2018-14951: Improper Neutralization of Input During Web Page Generation
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...
CVE-2018-14953: Improper Neutralization of Input During Web Page Generation
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...
PT-2018-12826
Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific vector involving an svg tag and an xlink:href attribute. Recommendations F...
PT-2018-12827
Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, such as a "form action='data:text" attack. Recommendations...
PT-2018-12828
Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific input, such as a "maction xlink:href=" attack. Recommendations For...
PT-2018-12829
Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, namely a "math xlink:href=" attack. Recommendations For...
PT-2018-12830
Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue affects the mail message display page, where an XSS attack can be performed via the formaction attribute. Recommendations For versions prior to 1.4.23, update to version 1.4.23 or lat...
SUSE-SU-2018:1507-1 Security update for zziplib
This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-6542: Reject file if the size of the central directory is too big and display an error message bsc1079094...
CVE-2016-4740
Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors...
douphp /cache 目录物理路径泄漏
漏洞分析 漏洞文件 cache目录下的所有文件 如：admin/backup.htm.php php tplvars'lang''home'; ?//会引起报错 2. 漏洞利用 直接访问 http://www.douco.com/cache/admin/backup.htm.php 然后查看网页源码，泄漏物理路径 3. 漏洞修复 关闭错误信息显示...
cumin: multiple XSS flaws
Multiple cross-site scripting XSS vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 "error message displays" or 2 "in source HTML on...
BlackHole RAT : Mac OS X backdoor Trojan !
'BlackHole' is the latest remote administration tool RAT and is available both in Windows and Mac. Hacktool such RAT employs client-server program that communicates to its victim's machine through its trojan server. The server application is installed on the victim while the client application is...
