AfterLogic Pro and Lite <= 7.1.1.1 Stored XSS Vulnerability

XSS codes can be stored in E-Mail Body. So you can send an email to the Victim with below payload and steal the victim's cookie. Usage Info Phpmailer class is included in the exploit so you need to download it here and run the exploit in the phpmailer directory:...

SuSE 10 Security Update : subversion (ZYPP Patch Number 6423)

This update of subversion fixes some buffer overflows in the client and server code that can occur while parsing binary diffs. CVE-2009-2411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2006-6423

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16475 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/mailenablelogin.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2008-6423

PassWiki (passwiki.php) is vulnerable to a directory traversal / local file inclusion via the site_id parameter, affecting versions up to 0.9.16 RC3 and 0.9.17 and earlier. The root cause is unsanitized user input in site_id, enabling reading arbitrary local files. Exploitation details and active...

CVE-2008-6423

creationtimestamp| type| source ---|---|--- 2008-05-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5704...

CVE-2007-6423

Unspecified vulnerability in modproxybalancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue...

CVE-2007-6423

The CVE-2007-6423 issue concerns Apache HTTP Server 2.2.x on Windows, where mod_proxy_balancer could trigger memory corruption through a long URL. The Red Hat advisory notes the vulnerability as unspecified and unreproducible by the vendor, while Red Hat indicates that Apache 2.2.7-dev contains a...

Stack overflow

Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command. NOTE: this is probably different than CVE-2006-6423...

CVE-2006-6423

MailEnable IMAPD vulnerable in Enterprise/Professional editions (2.0–2.35 for Pro; 1.1–1.41/1.84 for various branches; 2.0–2.35), with a stack-based buffer overflow in the IMAP Login command that allows remote code execution via a crafted parameter and a long string in a pre-authenticated request...

MailEnable IMAPD (2.34/2.35) Login Request Buffer Overflow

MailEnable's IMAP server contains a buffer overflow vulnerability in the Login command. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MailEnable IMAPD 2.34/2.35 Login Request Buffer Overflow'...