EUVD-2013-0500

Malware in sbrugna...

EUVD-2013-3981

Malware in sbrugna...

EUVD-2004-2361

Malware in sbrugna...

IBM Lotus Domino 6/7 HTTP webadmin.nsf Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue reportedly exists in...

IBM Lotus Domino 6.5.1 HTTP webadmin.nsf Quick Console Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9901/info It has been reported that Lotus Domino server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself d...

CVE-2013-4050

Cross-site request forgery CSRF vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4051...

CVE-2013-4050

Cross-site request forgery CSRF vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-4051

CVE-2013-4051 is an XSS vulnerability in IBM Domino Web Administrator (webadmin.nsf) affecting Domino 8.5 and 9.0. It allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The related CVE-2013-4055 is a separate XSS in the same component. Public exploit...

CVE-2013-4055

CVE-2013-4055 is an XSS vulnerability in IBM Domino Domino Web Administrator (webadmin.nsf) affecting Domino 8.5 and 9.0. The issue permits remote authenticated users to inject arbitrary scripts/HTML via unspecified vectors; the exact exploitation path is not detailed in the provided documents. T...

CVE-2013-4051

Cross-site scripting XSS vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4055...

CVE-2013-0489

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0488

Cross-site scripting XSS vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0489

CVE-2013-0489 is a CSRF vulnerability in IBM Domino 8.5.x Web Administrator client (webadmin.nsf) that allows remote authenticated users to hijack administrator authentication. Connected sources indicate an exploit path via CSRF leading to potential OS command execution through the Quick Console ...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader ReadForm action to WebAdmin.nsf...

Stack overflow

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf...

CVE-2011-3575

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf...

CVE-2011-3575

IBM Lotus Domino 8.5.x (specifically 8.5.2 referenced in CVE-2011-3575) is affected by a stack-based buffer overflow in the NSFComputeEvaluateExt function of Nnotes.dll. The vulnerability allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPo...

Lotus Domino HPRAgentName Stack Overflow

Added: 07/08/2011 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem The WebAdmin.nsf resource on the Domino web service contains a buffer overflow vulnerability. Resolution No patch is available at this time. References...