Secure Mail unable to send large files.

Having problems using Secure Mail client in sending large files greater than 7 to 10MB Verifyed the WM Logs and could see the following error , where by the mail is send to the Outbox ERROR 2Response contained WBXML content with contentLength=15 for activeSyncCommand=SendMail INFO 4SendMail -...

Veris: [Stored XSS] sandbox.veris.in

Hello I want to report you another xss... but it's stored Steps to reproduce it : 1 . First create a group . 2. Go to https://sandbox.veris.in/portal/members/ and add a member with name " . 3. Add this member in a group created in step 1 .. . 4. Go to https://sandbox.veris.in/portal/assets/ and...

How to configure Desktop or Start Menu shortcuts With Citrix Receiver 4.x

Steps to configure Desktop or Start Menu shortcuts...

Linux ASLR vulnerabilities: an attacker with unlimited disable ASLR（CVE-2 0 1 6-3 6 7 2-the vulnerability warning-the black bar safety net

! Recently, security personnel repair a Linux ASLR in a relatively old vulnerability, with x86 devices on the 3 2-bit application usage rights of any user, by the RLIMITSTACK resource is set to“unlimited”you can disable ASLR. The vulnerability CVE number CVE-2 0 1 6-3 6 7 2, The CNNVD number of...

First Steps in Germany - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application First Steps in Germany published at the 'play' market has multiple vulnerabilities...

Uber: Self-XSS Vulnerability on Password Reset Form

Hello Security Team, I have found Third Security Vulnerability on your website :- https://partners.uber.com/ Vulnerability :-"XSS vulnerability on password reset time :" My Payload is this :- '" Following This Reproduce Steps : 1 send password reset link on your email id 2 open password reset lin...

Symantec Endpoint Protection Multiple Security Issues

SUMMARY Symantec Endpoint Protection SEP was susceptible to a number of security findings that could potentially result in an authorized but less privileged user gaining elevated access to the Management Console. SEP Client security mitigations can potentially be bypassed allowing arbitrary code...

New Relic: Reflected XSS on Signup Page

Hello Team, I have found a reflected XSS on Signup Page i.e. on https://newrelic.com/signup. Please find the below details. Vulnerable URL: https://newrelic.com/signup Vulnerable Field: Your Email Address Vulnerable Parameter: email Parameter Type: POST Payload used: Browser used: Mozilla Firefox...

lib32-libssh2: man-in-the-middle

There is a bits/bytes confusion bug resulting in generation of a significantly short ephemeral secret for the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. The resulting secret is 128 bits long, instead of the recommended sizes of 1024 and 2048 bits respectively. There ar...

CVE-2016-0753

Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters...

Zomato: Persistent input validation mail encoding vulnerability in the "just followed you" email notification.

This vulnerability allows an attacker to add custom html/js code to emails that are then sent to other users of zomato.com. This vulnerability can be reproduced by any normal user ie. unprivileged accounts by editing their profile's "your full name" field with malicious code. This is not possible...

HOME SPOT CUBE vulnerable to cross-site request forgery

Overview HOME SPOT CUBE provided by KDDI CORPORATION is a wireless LAN router. HOME SPOT CUBE contains a cross-site request forgery vulnerability. Masaki Yoshikawa of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...

HOME SPOT CUBE vulnerable to cross-site scripting

Overview HOME SPOT CUBE provided by KDDI CORPORATION is a wireless LAN router. HOME SPOT CUBE contains a cross-site scripting vulnerability. Masaki Yoshikawa of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

withinsecurity: Content Spoofing OR Text Injection in https://withinsecurity.com

Hi, I just found Content Spoofing OR Text-based injection vulnerability in https://withinsecurity.com site that would like to get fixed, Below are the POC and steps to reproduced an issue. 1 Go to https://withinsecurity.com this site 2 Then just changed above url like this...

How to Manually Install and Configure Citrix Receiver for Pass-Through Authentication

Citrix Workspace app is the new universal app for all workspace services, that will encompass all Citrix clients and app capabilities over time. This article describes how to install Citrix Receiver for Windows and configure Single Sign-on authentication to XenApp/XenDesktop. After configuring...

POP Peeper 4.0.1 - Persistent Code Execution Vulnerability

Exploit for windows platform in category remote exploits Title : POP Peeper 4.0.1 - Persistent Code Execution Vulnerability Author : ZwX Vendor : http://www.esumsoft.com/ Download : http://data.esumsoft.com/download/POPPeeperPro.zip Tested On : Windows 7 Description Vulnerability :...

SuperScan 4.1 - Scan HostnameIP Field Buffer Overflow

SuperScan 4.1 - Scan HostnameIP Field Buffer Overflow !/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Scan Hostname/IP Field Buffer Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 18/11/2015 Vendor Homepage :...

QNap QVR Client 5.1.0.11290 - Crash (PoC)

!/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2797-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2797-1 advisory. It was discovered that the Linux kernel did not check if a new IPv6 MTU set by a user space application was valid. A remote attacker could forge a route...

Sam Spade 1.14 - (Scan Addresses) Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python -- coding: cp1252 -- EXPLOIT TITLE: Sam Spade 1.14 Scan from IP address Field Exploit AUTHOR: VIKRAMADITYA "-OPTIMUS" Date of Testing: 2nd November 2015 Download Link :...