456 matches found
Vimeo: Serious Vulnerability Found
Hello , I have found interesting vulnerability and i hope you will like it and fix it soon because it will really cause damage . I can hijack your email server because there is no protection not even consider spam . kindly check the POC video :...
Atmail-Email-Server-6.4
By sending an email to a user with the Atmail administrative interface open, we can call a remote JavaScript file that will initiate the installation of a specially crafted plugin file via CSRF, enabling remote code execution on the Atmail server. import smtplib, urllib2, sys def sendMaildstemail...
Block.io: SMPT Protection not used, I can hijack your email server.
Description Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy combining SPF, DKIM, and DMARC but I don't see taht from block.io , You should apply strict SMPT policy to stop spoofed email sending from your domain. POC is attached. Exploit...
Sun JavaMail 1.3 API MimeMessage Infromation Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13683/info The MimeMessage method in the Sun JavaMail API does not perform sufficient validation on message number values that are passed to the method during requests. An attacker that can successfully authenticate to an...
NetcPlus SmartServer3 3.5.1 POP Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/790/info The POP server that is part of the NetcPlus SmartServer3 email server has an unchecked buffer that could allow an attacker to execute code on the server. If the USER command is followed by an argument of over 800...
winwebmail server 3.8.1.6 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: WinWebMail Server Version: 3.8.1.6 Vendor Site: http://www.winwebmail.net Software Download: http://www.winwebmail.net/email-server-download.html Timeline: 29 May 2012: Vulnerability reported...
PSCS VPOP3 2.0 Email Server Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10782/info It is reported that VPOP3 is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker issues a URI request containing a large value for the 'msglistlen' parameter ...
Noticeware Email Server 4.6.1.0 - Denial of Service Exploit
No description provided by source. NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...
NoticeWare Email Server 4.6 NG LOGIN Messages Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30605/info NoticeWare Email Server NG is prone to a denial-of-service vulnerability because it fails to handle user-supplied input. Remote attackers can exploit this issue to deny service to legitimate users. NoticeWare...
SmartMax MailMax 1.0 SMTP Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2312/info Smartmax MailMax is an email server for Windows 95/98/NT. It is vulnerable to buffer overflow attacks against the SMTP-command processing function. This can be exploited to execute arbitrary commands with the...
emailarchitect enterprise email server 10.0 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: EmailArchitect Enterprise Email Server Version: 10.0 Vendor Site: http://www.emailarchitect.net Software Download Link: http://www.emailarchitect.net/webapp/download/easetup.exe Timeline: 29...
PSCS VPOP3 2.0 Email Server WebAdmin Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8869/info It has been reported that PSCS VPOP3 Email Server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to embed malicious HTML and script code in a link. The issue is reported to...
atmail email server appliance 6.4 - Stored XSS - csrf - rce
No description provided by source. Exploit Title: Atmail Email Server Appliance 6.4 Remote Code Execution Date: Jul 21 2012 Author: muts Version: Atmail Email Server 6.4 By sending an email to a user with the Atmail administrative interface open, we can call a remote JavaScript file that will...
Ipswitch IMail 6.x File Attachment Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383 fo...
Infinite Interchange 3.61 Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2140/info Infinite Interchange is a multi function email server which supports most common internet protocols. An example of various functions include an http server and webmail interface. Unfortunately Interchange is...
uebimiau webmail 2.7.2 - Stored XSS
No description provided by source. !/usr/bin/python ''' Exploit Title: Uebimiau Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.uebimiau.org/ Software Link: http://www.uebimiau.org/downloads/uebimiau-2.7.2-any.zip Version: 2.7.2 Gr33Tz:...
xeams email server 4.4 build 5720 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Xeams Email Server Version: 4.4 Build 5720 Vendor Site: http://www.xeams.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with disclosure dat...
symantec mail-gear 1.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/827/info Mail-Gear, a multi-purpose filtering email server, includes a webserver for remote administration and email retrieval. This webserver is vulnerable to the '../' directory traversal attack. By including the string...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 From or 2 Date field in an email...
CVE-2012-2591
Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 From or 2 Date field in an email...