Cross-site Scripting Vulnerability in WPSMAIL Email Client

WPS Mail is a mail sending and receiving software developed by Kingsoft Group. There is a cross-site scripting vulnerability in the WPSMAIL email client, where js code is added to the content of sent emails, which triggers a cross-site attack when receiving emails...

Threat Outbreak Alert RuleID19680: Email Messages Distributing Malicious Software on November 25, 2015

Medium Alert ID: 42296 First Published: 2015 November 30 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19680 may contain the following files: Name |...

Threat Outbreak Alert RuleID19081: Email Messages Distributing Malicious Software on October 30, 2015

Medium Alert ID: 41816 First Published: 2015 October 30 14:38 GMT Last Updated: 2015 November 2 13:20 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19081...

Samsung - SecEmailComposer QUICK_REPLY_BACKGROUND Permissions

Samsung - SecEmailComposer QUICKREPLYBACKGROUND Permissions Source: https://code.google.com/p/google-security-research/issues/detail?id=490 The SecEmailComposer/EmailComposer application used by the Samsung S6 Edge has an exported service action to do quick replies to emails. It was found that th...

Threat Outbreak Alert RuleID16448: Email Messages Distributing Malicious Software on July 8, 2015

Medium Alert ID: 39674 First Published: 2015 July 7 19:20 GMT Last Updated: 2015 July 9 13:38 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16448KVR may...

Threat Outbreak Alert RuleID16245: Email Messages Distributing Malicious Software on June 28, 2015

Medium Alert ID: 39543 First Published: 2015 June 29 12:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16245 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID13932: Email Messages Distributing Malicious Software on March 10, 2015

Medium Alert ID: 37799 First Published: 2015 March 11 13:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13932 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID13151: Email Messages Distributing Malicious Software on January 20, 2015

Medium Alert ID: 37047 First Published: 2015 January 20 11:21 GMT Last Updated: 2015 January 21 14:46 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13151...

kdelibs4 -- KMail/KIO POP3 SSL Man-in-the-middle Flaw

Richard J. Moore reports: The POP3 kioslave used by KMail will accept invalid certificates without presenting a dialog to the user due a bug that leads to an inability to display the dialog combined with an error in the way the result is checked. This flaw allows an active attacker to perform MIT...

Mozilla Thunderbird does not adequately restrict HTML elements in email message content

Overview Mozilla Thunderbird does not adequately restrict HTML elements in email content, which could allow an attacker to execute arbitrary script when a specially-crafted email message is forwarded or replied to. Description Vulnerability Lab has reported a vulnerability in the way Mozilla...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Symantec Messaging Gateway SMG before 10.0 allow remote attackers to inject arbitrary web script or HTML via 1 web content or 2 e-mail content...

CVE-2012-0307

CVE-2012-0307 affects Symantec Messaging Gateway (SMG) prior to version 10.0. The vulnerability class is multiple cross-site scripting (XSS) issues, allowing remote attackers to inject arbitrary web script or HTML via (1) web content or (2) e-mail content. The public references describe XSS in th...

Incredimail Malformed MIME Message DoS Vulnerability

Incredimail is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-2109

wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use...

KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing

KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing source: https://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may...

Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue

-- Corsaire Security Advisory -- Title: Clearswift MAILsweeper MIME attachment evasion issue Date: 03.03.03 Application: Clearswift MAILsweeper 4.x Environment: Windows NT 4.0, Windows 2000, Author: Martin O'Neal [email protected] Audience: General distribution -- Scope -- The aim of this...

CVE-2000-1130

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment...

CVE-2000-1130

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment...

CVE-2000-1130

CVE-2000-1130 affects McAfee WebShield SMTP 4.5. An attacker can bypass email content filtering rules by using extended ASCII characters in the attachment name, enabling partial confidentiality/integrity impact as indicated by the record. The vulnerability description provided by multiple sources...