DEBIAN-CVE-2020-16094

In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree...

USN-4160-1 uw-imap vulnerability

It was discovered that UW IMAP incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands...

PT-2018-3298 · Mutt +5 · Mutt +5

Name of the Vulnerable Software and Affected Versions: Mutt versions prior to 1.10.1 NeoMutt versions prior to 2018-07-16 Description: The issue is related to the imap quote string function in the imap/util.c file of the Mutt and NeoMutt email clients. This function does not account for quote...

Ability Mail Server 2013 (3.1.1) - Stored XSS Vulnerability

Exploit for windows platform in category remote exploits import smtplib emailaddr = 'email protected' email = 'From: %s\n' % emailaddr email += 'To: %s\n' % emailaddr email += 'Subject: XSS\n' email += 'Content-type: text/html\n\n' email += 'alert"XSS"' s = smtplib.SMTP'192.168.58.140', 25...

Mozilla Releases BrowserID Web Authentication System

Mozilla has released a new browser-based federated login mechanism called BrowserID that is designed to replace the login process on Web sites that requires users to supply an email and password. The experimental system relies on the Verified Email protocol and also works on other browsers,...

Mozilla Thunderbird MIME外部主体堆溢出漏洞

CVECAN ID: CVE-2008-0304 Thunderbird是Mozilla发布的邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Thunderbird在处理畸形格式的邮件数据时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Thunderbird没有正确地解析邮件中的external-body MIME类型，在计算所要分配堆缓冲区的字节数时没有为所要拷贝的数据保留足够的空间。如果用户受骗打开了恶意邮件消息的话，就可能最多覆盖3字节的缓冲区，导致执行任意指令。 Mozilla Thunderbird 2.0.0.9 临时解决方法：...

CVE-2006-2267

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...

Code injection

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...

CVE-2006-2267

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...