xpfarm

XPFarm Una plataforma de seguridad ofensiva aumentada con IA de código abierto que envuelve herramientas de seguridad conocidas detrás de una interfaz web unificada — con escaneo distribuido, informes generados por IA, un planificador de escaneo inteligente, un gráfico de ataque interactivo y un...

EUVD-2015-4322

Malware in sbrugna...

EUVD-2014-2234

Malware in sbrugna...

EUVD-2015-6197

Malware in sbrugna...

EUVD-2014-2232

Malware in sbrugna...

MAL-2025-47043 Malicious code in @oneaudi/unified-web-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20171e9f2ae7e55f3032123ab947e0b9f8cbccfb379a0eab62a30efd737da76b Any computer that has this package installed or running should be considered...

Janusec Application Gateway - Tool Which Provides WAF, CC Attack Defense, Unified Web Administration Portal, Private Key Protection, Web Routing And Scalable Load Balancing

Janusec Application Gateway, an application security solutions which provides WAF Web Application Firewall, unified web administration portal, private key protection, web routing and scalable load balancing. With Janusec, you can build secure and scalable applications. Key Features WAF Web...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.01 allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSCuw24479...

CVE-2015-6416

CVE-2015-6416 is a cross-site scripting (XSS) vulnerability in Cisco’s Unified Email Interaction Manager and Unified Web Interaction Manager version 11.0(1). The issue arises from insufficient sanitization of user-supplied input in the web interface, allowing an unauthenticated, remote attacker t...

CVE-2015-6416: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.01 allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSCuw24479...

CVE-2015-4298

CVE-2015-4298 affects Cisco Unified Web and E-Mail Interaction Manager (versions 9.0(2) and 11.0(1)). The root cause is improper authorization handling that allows remote authenticated users to read or write stored data via unspecified vectors. The vulnerability results from insufficient validati...

CVE-2015-6255

CVE-2015-6255 affects Cisco Unified Web and E‑Mail Interaction Manager 9.0(2). The vulnerability resides in the web chat interface where insufficient input validation allows a remote attacker to deliver a crafted chat message that injects arbitrary web script or HTML (XSS). The root cause is inpu...

CVE-2015-4299

Cisco's advisory for CVE-2015-4299 states that Cisco Unified Web and E-Mail Interaction Manager 9.0(2) exposes an authorization flaw. An authenticated, remote attacker can remove default messaging-queue system folders due to improper authorization logic. Root cause: insufficient validation of per...

CVE-2015-4298: Improper Access Control

Cisco Unified Web and E-Mail Interaction Manager 9.02 and 11.01 improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056...

PT-2015-7141

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager version 9.02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted chat message. Recommendations For Cisco Unified Web and...

CVE-2015-4299: Improper Access Control

Cisco Unified Web and E-Mail Interaction Manager 9.02 improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCuo89046...

PT-2015-6510

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager version 9.02 Description The issue is related to improper authorization, allowing remote authenticated users to remove default messaging-queue system folders. Recommendations For Cisco Unified W...

CVE-2015-6255: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug ID CSCuo89051...

PT-2015-6509

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager versions 9.02 and 11.01 Description The issue is related to improper authorization, allowing remote authenticated users to read or write to stored data. Recommendations For version 9.02, update ...

Cisco Unified Web and E-Mail Interaction Manager SQL Injection Vulnerability

Cisco Unified Web and E-mail Interaction Manager are both products in the Customer Collaboration Contact Center of the American Cisco Cisco company. A SQL injection vulnerability exists in Cisco Unified Web and E-Mail Interaction Manager, which could be exploited by a remote attacker to submit a...