366 matches found
Remote code execution
A remote code execution vulnerability exists when Windows Address Book WAB improperly processes vcard files.To exploit the vulnerability, an attacker could send a malicious vcard that a victim opens using Windows Address Book WAB, aka 'Windows Address Book Remote Code Execution Vulnerability'...
Windows Address Book Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Address Book WAB improperly processes vcard files. To exploit the vulnerability, an attacker could send a malicious vcard that a victim opens using Windows Address Book WAB. After successfully exploiting the vulnerability, an attacker coul...
PT-2020-3186 · Microsoft · Windows Address Book +1
Name of the Vulnerable Software and Affected Versions: Windows Address Book affected versions not specified Description: A remote code execution issue exists due to improper processing of vcard files by Windows Address Book WAB. An attacker can exploit this by sending a malicious vcard file that...
CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution Exploit Author: Wade Guest Vendor Homepage: https://craftcms.com/ Software Link: https://plugins.craftcms.com/vcard Vulnerability Details:...
Craft CMS 3 vCard 1.0.0 Remote Code Execution
Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution Date: 2020-05-18 Exploit Author: Wade Guest Vendor Homepage: https://craftcms.com/ Software Link: https://plugins.craftcms.com/vcard Vulnerability Details: https://gitlab.com/wguest/craftcms-vcard-exploit Version: 1.0.0 Tested o...
CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution
Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution Date: 2020-05-18 Exploit Author: Wade Guest Vendor Homepage: https://craftcms.com/ Software Link: https://plugins.craftcms.com/vcard Vulnerability Details: https://gitlab.com/wguest/craftcms-vcard-exploit Version: 1.0.0 Tested o...
CVE-2019-18641
Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...
CVE-2019-18641
Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...
Design/Logic Flaw
Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...
CVE-2019-18641
Rock RMS prior to 1.8.6 contains a vulnerability in the People/GetVCard/REST controller where vCard access is mishandled, potentially allowing unauthorized access to vCard data. The issue is tied to the access control logic for vCard retrieval and is documented across multiple sources as CVE-2019...
CVE-2019-18641
Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...
PT-2020-9978 · Rock Rms · Rock Rms
Name of the Vulnerable Software and Affected Versions: Rock RMS versions prior to 1.8.6 Description: The issue is related to mishandled vCard access control within the People/GetVCard/REST controller. This could potentially allow unauthorized access to sensitive information. Recommendations: For...
[SECURITY] Fedora 31 Update: php-horde-Horde-Data-2.1.5-1.fc31
A data import and export API, with backends for: CSV TSV iCalendar vCard vNote vTodo...
[SECURITY] Fedora 30 Update: php-horde-Horde-Data-2.1.5-1.fc30
A data import and export API, with backends for: CSV TSV iCalendar vCard vNote vTodo...
Fedora: Security Advisory for php-horde-Horde-Data (FEDORA-2020-0248ad925e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for php-horde-Horde-Data (FEDORA-2020-1e7cc91d55)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
IceWarp 12.2.0 / 12.1.x Cross Site Scripting
Advisory: IceWarp: Cross-Site Scripting in Notes for Contacts During a penetration test, RedTeam Pentesting discovered that the IceWarp WebMail Server is prone to user-assisted cross-site scripting attacks in its contact module. If IceWarp users import a manipulated vcard, for example from an...
CVE-2019-15950
The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data...