Axigen Mail Server 8.0.1 Stored XSS
>> TAG: #xss
Axigen Mail Server 8.0.1 Stored XSS
Xeams Email Server 4.4 Build 5720 Stored XSS
WinWebMail Server 3.8.1.6 Stored XSS
T-dah Webmail Client 3.2.0-2.3 Stored XSS
SurgeMail 6.0a4 Stored XSS
Zero Day Initiative Advisory 12-135 – This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file
Zero Day Initiative Advisory 12-130 – This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
[Hebrew] Digital Whisper Security Magazine #34
Dr. Web Control Center 6.00.3.201111300 XSS Vulnerability
This is a MobileSubstrate extension to disable certificate validation within NSURLConnection in order to facilitate black-box testing of iOS Apps. Once installed on a jailbroken device, iOS SSL Kill Switch patches NSURLConnection to override and disable the system’s default certificate validation as well as any kind of custom certificate validation (such as certificate pinning).