CVE-2026-93272

The Linux kernel contains a vulnerability in the remoteproc: qcom_wcnss component related to how it handles power domain (PD) regulators. Specifically, an incorrect info pointer increment—swapping num_pd_vregs for num_pds—causes the pointer to shift past the end of the array for pronto-v3 platfor...

account.prontoinsurance.com Cross Site Scripting vulnerability OBB-2891622

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2018-18621

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

Design/Logic Flaw

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

CVE-2018-18621

CVE-2018-18621 affects CommuniGate Pro 6.2 via a stored XSS in Pronto! Mail Composer. The vulnerability occurs when the raw email link (in .txt format) is modified and renamed with a .html or .wssp extension, and the malformed message body is mishandled by /MIME/INBOX-MM-1/. Documented impact is ...

CVE-2018-18621

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

PT-2018-14543

Name of the Vulnerable Software and Affected Versions CommuniGate Pro version 6.2 Description The issue allows for stored XSS via a message body in Pronto! Mail Composer. This occurs when the raw email link in .txt format is modified and then renamed with a .html or .wssp extension, which is...

CVE-2018-18621: Improper Neutralization of Input During Web Page Generation

CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-MM-1/ if the raw email link in .txt format is modified and then renamed with a .html or .wssp extension...

pizza-pronto-nemours.com XSS vulnerability

Open Bug Bounty ID: OBB-659071 Description| Value ---|--- Affected Website:| pizza-pronto-nemours.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CommuniGate Pro WebMail Crystal, pronto and pronto4 component cross-site scripting vulnerability

CommuniGate Pro is a comprehensive Mail Transfer Agent MTA developed by CommuniGate, Inc. that supports multiple platforms.WebMail Crystal, pronto and pronto4 are among the components used in it. A cross-site scripting vulnerability exists in the WebMail Crystal, pronto and pronto4 components of...

CVE-2017-16962: Improper Neutralization of Input During Web Page Generation

The WebMail components Crystal, pronto, and pronto4 in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via 1 the location or details field of a Google Calendar invitation, 2 a crafted Outlook.com calendar aka Hotmail Calendar invitation, 3 e-mail granting access to a directory that h...

PT-2017-14665

Name of the Vulnerable Software and Affected Versions CommuniGate Pro versions prior to 6.2.1 Description The issue concerns stored XSS vulnerabilities in the WebMail components of CommuniGate Pro, specifically in Crystal, pronto, and pronto4. These vulnerabilities can be exploited through variou...

CommuniGatePro 6.1.16 Cross Site Scripting Vulnerability

CommuniGatePro version 6.1.16 suffers from multiple stored cross site scripting vulnerabilities. Exploit Title: CommuniGatePro webmails Multiple Stored XSS Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link:...