649 matches found
[SECURITY] Fedora 31 Update: roundcubemail-1.4.6-1.fc31
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
[SECURITY] Fedora 32 Update: roundcubemail-1.4.6-1.fc32
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
seovavavoom.com Cross Site Scripting vulnerability OBB-1190873
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
[SECURITY] Fedora 32 Update: roundcubemail-1.4.4-1.fc32
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Cross-Site Scripting (XSS)
Dnn.Platform is vulnerable to cross-site scripting XSS. The vulnerability exists as it allows XHTML tags such as...
Microsoft Windows MSHTML Engine - (Edit) Remote Code Execution Exploit
Exploit for windows platform in category local exploits Exploit Title: Microsoft Windows CVE-2019-0541 MSHTML Engine "Edit" Remote Code Execution Vulnerability Google Dork: N/A Date: March, 13 2019 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link:...
[SECURITY] Fedora 28 Update: roundcubemail-1.3.8-1.fc28
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Intelliants Subrion CMS 4.2.1 - Authenticated File Upload Bypass to RCE
This module exploits an authenticated file upload vulnerability in Subrion CMS versions 4.2.1 and lower. The vulnerability is caused by the .htaccess file not preventing the execution of .pht, .phar, and .xhtml files. Files with these extensions are not included in the .htaccess blacklist, hence...
HPE Intelligent Management Center PLAT reportTaskSelect.xhtml Code Execution
The vulnerability of the reportTaskSelect.xhtml component in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the beanName parameter...
[SECURITY] Fedora 27 Update: roundcubemail-1.3.3-1.fc27
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
[SECURITY] Fedora 26 Update: roundcubemail-1.3.3-1.fc26
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
DokuWiki /inc/parser/xhtml.php file cross-site scripting vulnerability
DokuWiki is a PHP-based Wiki engine. A cross-site scripting vulnerability exists in the DokuWiki /inc/parser/xhtml.php file, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user...
DokuWiki /inc/parser/xhtml.php file cross-site scripting vulnerability
DokuWiki is a German software developer Andreas Gohr developed a PHP-based Wiki engine , it is mainly used for small and medium-sized team and personal website knowledge base management , and provides version control , full-text search and permission control and other functions . A cross-site...
UBUNTU-CVE-2017-12980
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-controlled server to trigger JavaScript execution. The JavaScript can be in an author field, as...
[SECURITY] Fedora 24 Update: roundcubemail-1.2.5-1.fc24
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
CVE-2016-9107
The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2016-9107
CVE-2016-9107 concerns the Gajim OTR plugin, where information is sent in cleartext when using XHTML. This leads to a potential information disclosure vulnerability, allowing remote attackers to obtain sensitive data via unspecified vectors. The affected component is the Gajim OTR plugin; the roo...
PT-2017-9955
Name of the Vulnerable Software and Affected Versions Gajim OTR plugin affected versions not specified Description The issue allows remote attackers to obtain sensitive information via unspecified vectors because the OTR plugin for Gajim sends information in cleartext when using XHTML...
CVE-2016-9107: Exposure of Sensitive Information to an Unauthorized Actor
The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...
[SECURITY] Fedora 24 Update: roundcubemail-1.2.0-1.fc24
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...