1206 matches found
OX Appsuite - Cross-Site Scripting
OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI. id: CVE-2020-24701 info: name: OX Appsuite - Cross-Site Scripting author: DhiyaneshDk severity: medium description: | OX App Suite through 7.10.4 allows XSS via the app loading mechanism the...
Blind-SSRF-CVE-2020-15002
Summary Logic in AddFileAction.getImageDataFromUrl for fetching images from external URLs when handling /appsuite/api/oxodocumentfilter&action=addfile implemented here validates the redirected URLs only after following all redirects response = httpClient.executegetRequest, context; int statusCode...
@gluuten/gluuten-cli (0.9.5), @open-xchange/vite-plugin-i18next-gettext (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2026-55451 via gettext-converter (>=1.0.3, <=1.3.2)
gettext-converter NPM version =1.0.3, =0.0.1, =7.1.0, =4.11.2, =4.18.0 Source cves: CVE-2026-55451 Source advisory: GHSA-F4JP-RW7W-CCWG...
Appsuite Login Panel - Detect
Detects Appsuite Login Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Appsuite Login Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Appsuite Login Panel - Detect', 'description'...
Open-Xchange OX Dovecot Pro Resource Management Error Vulnerability
Open-Xchange OX Dovecot Pro is an email storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a resource management vulnerability, which stems from excessive use of curly braces in IMAP, leading to uncontrolled memory usage. This can result in...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability. This vulnerability arises from the possibility for attackers to use specially crafted Base64-encoded exchanges to forge SCRAM TL...
Open-Xchange OX Dovecot Pro Access Control Vulnerability
Open-Xchange OX Dovecot Pro is an email storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a access control vulnerability. This vulnerability stems from the IMAP SETACL command, which allows the anyone permission to be injected into the user’s...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability. This vulnerability arises from the use of a security filter for variable expansion, where all subsequent pipes on the same strin...
Open-Xchange OX Dovecot Pro Resource Management Error Vulnerability
Open-Xchange OX Dovecot Pro is an email storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a resource management vulnerability. This vulnerability stems from allowing attackers to upload malicious Sieve scripts, bypassing the configured CPU ti...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability that can be exploited under certain conditions, leading to a replay attack, which may allow attackers to log in as users...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability, which stems from the insecure handling of zip-format attachments by the attachment-to-text script. This vulnerability may allow...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability that stems from disconnecting from the authentication server when invalid base64 SASL data is sent. This vulnerability could lead...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. OX Dovecot Pro has a security vulnerability; this vulnerability arises from email messages that contain excessive RFC 2231 MIME parameters, which may lead to excessive CPU usage and...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is an email storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability, which stems from the use of passwd files for each domain. This configuration allows for path traversal attacks, potentially...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability. This vulnerability arises from the possibility of injecting arbitrary LDAP filters when authusernamechars is empty, which may le...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability. This vulnerability allows attackers to send specially crafted messages before authentication, thereby allocating a large amount ...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability; this vulnerability arises from the possibility of additional memory allocation when specific NOOP commands are sent, which could...
Open-Xchange OX Dovecot Pro security vulnerability
Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability. This vulnerability stems from the ManageSieve AUTHENTICATE command failing when literal values are used as SASL initial response...
CVE-2013-6009
CRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain conditions, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet...