HP AdvanceStack Switch Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4062/info HP AdvanceStack 10Base-T Switching Hubs combine 10Base-T functionality with the performance of switching. It has been reported that authentication for HP J3210A 10Base-T Switching Hubs may be bypassed by an...

Microsoft Outlook Web Access for Exchange Server 2003 'redir.asp' URI Redirection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks. OWA 6.5 SP 2 is...

Outfront Spooky 2.x Login SQL Query Manipulation Password Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4661/info Spooky Login is a commerical web access control and account management software package. It is distributed and maintained by Outfront, and is designed for Microsoft IIS Webservers. Under some circumstances, it m...

Microsoft Outlook 2003 Web Access Login Form Remote URI Redirection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attacker may leverage this issue to carry...

IBM Lotus Domino Web Access Upload Module Buffer Overflow

No description provided by source. $Id: ibmlotusdominodwauploadmodule.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensin...

IBM Lotus Domino Server 6 - Web Access Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10641/info Lotus Domino Server is reported prone to a remote denial of service vulnerability. The issue is reported to exist when a malicious email that is received on the affected server, is opened through the Domino Web...

Microsoft Exchange Server 2000/2003 Outlook Web Access Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18381/info Microsoft Exchange Server Outlook Web Access is prone to a script-injection vulnerability. A remote attacker can exploit this issue by sending a malicious email message to a vulnerable user. !/usr/bin/perl use...

Oracle OpenSSO 8.0 - Multiple XSS POST Injection Vulnerabilities

No description provided by source. ?!-- Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities Vendor: Oracle Corporation Product web page: http://www.oracle.com Affected version: 8.0 Update 2 Patch3 Build 6.1 2011-June-8 05:24 Summary: Oracle OpenSSO is a complete solution that provides...

IBM Domino Web Access Upload Module - SEH Overwrite Exploit

No description provided by source. !-- written by e.b. IBM Domino Web Access Upload Module Universal BoF Exploit CVE-2007-4474 Tested on Windows XP SP2fully patched English, IE6 and IE7 dwa7w.dll version 7.0.34.1 inotes6.dll version 6.0.40.0 and version 6.0.48.0 inotes6w.dll version 6.0.48.0 Than...

PHPNuke 5.6/6.x Banners.PHP Banner Manager Password Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7170/info It has been reported that an input validation error exists in the banners.php file included with PHPNuke. Because of this, an attacker could send a malicious string through PHPNuke that would allow the attacker ...

Outlook Web Access 2007 CSRF Vulnerability

No description provided by source. Source: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails Demo: http://www.youtube.com/watch?v=Bx-zfu0uXYg After Nduja Connection worm and the Memova issue, it's now time to shed a light on vulnerabilities affecting corporate webmails. And wh...

TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 - Remote User Credential Dump

Exploit Title: Team Helpdesk Customer Web Service CWS Remote User Credential Dump exploit Exploit Title: Team Helpdesk Technician Web Access TWA Remote User Credential Dump exploit Date: May 5, 2014 Exploit Author: bhamb [email protected] Vendor Homepage: http://www.assistmyteam.net/TeamHelpdesk/...

Private Camera Pro 5.0 iOS - Multiple Vulnerabilities

Private Camera Pro 5.0 iOS - Multiple Vulnerabilities Document Title: =============== Private Camera Pro v5.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1216 Release Date: ============= 2014-02-24 Vulnerability...

Fedora Update for zarafa FEDORA-2014-1883

Check for the Version of zarafa OpenVAS Vulnerability Test Fedora Update for zarafa FEDORA-2014-1883 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 20 Update: zarafa-7.1.8-1.fc20

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

Scientific Linux Security Update : piranha on SL6.x i386/x86_64 (20140213)

It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative...

DUO-PSA-2014-001: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2014-001 Publication Date: 2014-01-08 Status: Confirmed, Fixed Document Revision: 2 Overview Older versions of the Duo Security Outlook Web Access OWA integration may be vulnerable to a bypass of the second authentication factor. Description Unde...

Cross site scripting

Cross-site scripting XSS vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability."...

CVE-2013-5072

The CVE-2013-5072 entry refers to a cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) of Microsoft Exchange Server 2010 SP2/SP3 and 2013 Cumulative Updates 2 and 3. The vulnerability arises from improper sanitization of input in OWA, permitting a crafted URL to inject arbitrary...

MS Exchange Server Remote Code Execution Vulnerabilities (2915705)

This host is missing a critical security update according to Microsoft Bulletin MS13-105. OpenVAS Vulnerability Test $Id: secpodms13-105.nasl 6079 2017-05-08 09:03:33Z teissa $ MS Exchange Server Remote Code Execution Vulnerabilities 2915705 Authors: Antu Sanadi Copyright: Copyright C 2013 SecPod...