disclosures

Cylance Vulnerability Research - Репозиторий раскрытий Это репозиторий, в котором собраны все публичные раскрытия уязвимостей команды Vulnerability Research компании Cylance. Ниже приведён открытый ключ для электронной почты нашей команды исследования уязвимостей: -----BEGIN PGP PUBLIC KEY...

CVE-2026-89255

AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains a stored cross-site scripting vulnerability in the LoginControl plugin . The root cause is a failure to HTML-encode PGP public keys before echoing them into a element. An authenticated attacker can submit a crafted public ...

CVE-2026-89255 AVideo LoginControl Stored XSS via PGP Public Key

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public keys echoed into a textarea element. An authenticated attacker can inject malicious JavaScript by submitting a crafte...

CVE-2026-89255 AVideo LoginControl Stored XSS via PGP Public Key

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public keys echoed into a textarea element. An authenticated attacker can inject malicious JavaScript by submitting a crafte...

CVE-2026-89255 AVideo LoginControl Stored XSS via PGP Public Key

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public keys echoed into a textarea element. An authenticated attacker can inject malicious JavaScript by submitting a crafte...

EUVD-2015-7309

Malware in sbrugna...

Security update for enigmail (important)

This update for enigmail to version 1.9.9 fixes the following issues boo1073858: Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintex...

Security update for enigmail (important)

This update for enigmail to version 1.9.9 fixes the following issues boo1073858: Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintex...

OPENSUSE-SU-2017:3427-1 Security update for enigmail

This update for enigmail to version 1.9.9 fixes the following issues boo1073858: Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintex...

OPENSUSE-SU-2017:3419-1 Security update for enigmail

This update for enigmail to version 1.9.9 fixes the following issues boo1073858: Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintex...

PT-2016-7144

Name of the Vulnerable Software and Affected Versions Open-Xchange OX Guard versions prior to 2.4.2-rev5 Description An issue allows script code and references to external websites to be injected into the names of PGP public keys. When a user requests the key later using a specific URL, the...

Cross site scripting

Cross-site scripting XSS vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."...

PT-2015-7543

Name of the Vulnerable Software and Affected Versions Open-Xchange OX Guard versions prior to 2.0.0-rev11 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key. This occurs because the input is n...

CVE-2015-7385: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."...

MIT PGP Public Key Server 0.9.2/0.9.4 Search String Remote Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/4828/info The PGP Public Key Server is a freely available, open source software package distributed by MIT. It is designed for use on Linux and Unix operating systems. The PGP Public Key Server does not properly handle lo...

CVE-2002-0900: Undefined Security Weakness

Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long search argument to the lookup capability...

Buffer overflow in PGP Public Key Server

Buffer overflow on long search string...

MIT PGP Public Key Server 0.9.20.9.4 - Search String Remote Buffer Overflow

MIT PGP Public Key Server 0.9.20.9.4 - Search String Remote Buffer Overflow source: https://www.securityfocus.com/bid/4828/info The PGP Public Key Server is a freely available, open source software package distributed by MIT. It is designed for use on Linux and Unix operating systems. The PGP...

MIT PGP Public Key Server 0.9.2/0.9.4 - Search String Remote Buffer Overflow

source: https://www.securityfocus.com/bid/4828/info The PGP Public Key Server is a freely available, open source software package distributed by MIT. It is designed for use on Linux and Unix operating systems. The PGP Public Key Server does not properly handle long search strings. Under some...