CVE-2005-2036

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

Gaim 1.2.1 - URL Handling Remote Stack Overflow

Gaim 1.2.1 - URL Handling Remote Stack Overflow // Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a...

CVE-2005-0157

The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned...

phpBBupload.txt

Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...

CVE-2005-0695: Undefined Security Weakness

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

CVE-2005-0695

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities

Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may...

CVE-2005-0107

bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands...

CVE-2005-0107

bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands...

CVE-2005-0107: Undefined Security Weakness

bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands...

Obscure email addresses in Confluence Mail

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-2677. panel Just noticed that http://confluence.atlassian.com/spaces/viewmailarchive.action?key=DOC is showing my full email...

CVE-2004-2226

Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets CSS document on the attacker's server...

Wirtualna Polska WPKontakt 3.0.1 - Remote Script Execution

source: https://www.securityfocus.com/bid/12097/info WPKontakt is reported prone to a potential script execution vulnerability. It is reported that this issue may allow remote attackers to execute arbitrary script code on a vulnerable computer, which may lead to various attacks. Arbitrary script...

Bolthole Filter 2.6.1 - Address Parsing Buffer Overflow

source: https://www.securityfocus.com/bid/11977/info Bolthole Filter is prone to a buffer overflow vulnerability. This issue is exposed when the software parses email address data. If successfully exploited, this vulnerability could result in execution of arbitrary code in the context of the...

Bolthole Filter 2.6.1 - Address Parsing Buffer Overflow

Bolthole Filter 2.6.1 - Address Parsing Buffer Overflow source: https://www.securityfocus.com/bid/11977/info Bolthole Filter is prone to a buffer overflow vulnerability. This issue is exposed when the software parses email address data. If successfully exploited, this vulnerability could result i...

CVE-2004-1113

SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 sender or 2 recipient e-mail addresses...

Qwik SMTP 0.3 Remote Root Format String Exploit

Exploit for linux platform in category remote exploits =============================================== Qwik SMTP 0.3 Remote Root Format String Exploit =============================================== / qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle Exploit...

Qwik SMTP 0.3 - Format String

Qwik SMTP 0.3 - Format String / qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle Exploit coded by: Carlos Barros Home Page: http://www.barrossecurity.com Exploitation techinique: This bug is a simple format string bug. While coding this exploit, I found just...

CVE-2002-1198: Undefined Security Weakness

Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack...

Mantis Bug Tracker 0.x - New Account Signup Mass Emailing

Mantis Bug Tracker 0.x - New Account Signup Mass Emailing source: https://www.securityfocus.com/bid/10995/info Mantis is reportedly susceptible to a vulnerability in its signup process allowing mass email attacks. When a new user signs up to Mantis, the system automatically sends an email message...