355 matches found
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
Exploit for multiple platform in category dos / poc =============================================================== Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into you...
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
No description provided by source. nnp at silenthack.co.uk http://silenthack.co.uk Kmail = 1.9.1 latest suffers from a crash when trying to parse an incorrectly formatted img tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick...
Kmail 1.9.1 - IMG SRC Remote Denial of Service
Kmail 1.9.1 - IMG SRC Remote Denial of Service nnp at silenthack.co.uk http://silenthack.co.uk Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into your local...
Kmail 1.9.1 - IMG SRC Remote Denial of Service
nnp at silenthack.co.uk http://silenthack.co.uk Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into your local /var/spool/mail/whoami or send a mail containing the HTML pa...
[Full-disclosure] Kmail <= 1.9.1 (latest) DOS
Found this while fuzzing for a different type of vuln. For the life of me I cant do anything useful with this bug so here it is. I dont have the time to narrow down what causes the crash, if anyone manages to get code execution from it, be a dear and let me know ; I am using KDE 3.5.2 and kmail...
CVE-2006-2104
The CVE covers multiple reflected cross-site scripting (XSS) flaws in Kamgaing Email System (kmail) version 2.3 and earlier. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML by manipulating specific parameters: d and (1) main.php, ordner and (2) main.php, (3) webd...
CVE-2006-2104: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Kamgaing Email System kmail 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 d parameter to main.php, ordner parameter to 2 main.php, or 3 webdisk.php, 4 draft parameter to compose.php, or 5 m, or 6 y...
Kmail <=2.3 vuln.
Kmail =2.3 vuln. Vulnerability discovered by : r0t Date: 28 april 2006 vendorlink:www.webofall.com/displaynews.php?id=4 affected versions:2.3 and prior orginal advisory:http://pridels.blogspot.com/2006/04/kmail-23-vuln.html Vuln. Description: 1. Multiple Cross-Site Scripting attack vulnerabilitie...
CVE-2005-0404
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...
CVE-2005-0404
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...
CVE-2005-0404
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...
CVE-2005-0404
Removed by vendor...
CVE-2005-0404
CVE-2005-0404 describes a vulnerability in KDE’s KMail 1.7.1 (KDE 3.3.2) where HTML-formatted emails can spoof visible email metadata (e.g., signing/encryption indicators). The root cause is how KMail handles HTML content, enabling an attacker to overlay content to misrepresent the email’s origin...
CVE-2005-0404: Undefined Security Weakness
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...
KDE KMail HTML Email Information Spoofing
Binary data 2811.prm...
KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing
KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing source: https://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may...
KMail mail agent signed content spoofing
Invalid HTML part handling allows to spoof signed text...
[UNIX] Kmail HTML Support Allows Spoofing of Emails' Content
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing
source: https://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may leverage this issue to spoof email content and various header...