1615 matches found
Dashlane: Extract Billing admin email address using random team id
Any user can extract and enumerate email address of dashlane members. Steps to reproduce 1 Login to console.dashlane.com Register using https://www.dashlane.com/business/try 2 Click on Manage Users while intercepting request in Burp 3 Look for a request to...
Command injection
In HordeCrypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has PGP features enabled in their preferences, and attempts to encrypt an email addressed to a maliciously crafted email...
CVE-2017-5832
Cross-site scripting XSS vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address...
CVE-2017-5832
Cross-site scripting XSS vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address...
MC Hosting Coupons Script - Cross-Site Request Forgery
MC Hosting Coupons Script - Cross-Site Request Forgery Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: İhsan Şencan Author...
CVE-2016-10033: the PHPMailer remote code execution vulnerability analysis-vulnerability warning-the black bar safety net
PHP is an open source scripting language that is used to embed the HTML to do Web development. It has 9 million users, and is the many popular tools such as WordPress, Drupal, Joomla! Etc. This Monday a high-risk security update to solve the PHPMailer remote code execution vulnerability...
Beijing Evolver Robotics Fatty App Client Has Overstepping Vulnerabilities
Beijing Evolver Robotics Technology Co., Ltd. is engaged in the research and development of intelligent robots for home and commercial use, and has developed two versions of intelligent robots for home and commercial use, FABO. Beijing Evolver Robotics FABO app client has an overstepping...
CVE-2016-10074
The mail transport aka SwiftTransportMailTransport in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted e-mail address in the 1 From, 2 ReturnPath, or 3 Sender...
Command injection
The mail transport aka SwiftTransportMailTransport in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted e-mail address in the 1 From, 2 ReturnPath, or 3 Sender...
CVE-2016-10074
The mail transport aka SwiftTransportMailTransport in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted e-mail address in the 1 From, 2 ReturnPath, or 3 Sender...
CVE-2016-10034
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double...
PHPMailer Mail From Remote Code Execution (CVE-2016-10033; CVE-2016-10045)
A remote code execution vulnerability exists in PHPMailer. The vulnerability is due to lack of email address validation. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Exploit for Argument Injection in Phpmailer_Project Phpmailer
PHPMailer And that's it, you have your shell. There is...
CVE-2016-2958
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response...
CVE-2016-2958
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response...
CVE-2016-2958
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response...
MGASA-2016-0397 Updated perl-Email-Address packages fix security vulnerability
Pali Rohár discovered a possible DoS attack in any software which uses the Email::Address Perl module for parsing string input to a list of email addresses. Note that this issue has only been partially mitigated in Email::Address itself...
Updated perl-Email-Address packages fix security vulnerability
Pali Rohár discovered a possible DoS attack in any software which uses the Email::Address Perl module for parsing string input to a list of email addresses. Note that this issue has only been partially mitigated in Email::Address itself...
Legal Robot: User Information sent to client through websockets
Hey, I noticed when monitoring the websocket requests that the account information of many users, including email address, is sent to the client. For example: ██████ ██████████ █████████ ████████ ███████ There's hundreds of these requests, each containing user information. Please let me know if...
