DEBIAN-CVE-2016-9920

steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute...

Secure Mail Error: "Access to company is not currently available"

Worx/Secure Mail Error: "Access to your company is not currently available" Errors found in the client logs: AGTunnel fails to start when attempting to proxy traffic from the NSG " 2016-11-14T11:22:11.535+0000 ",AGTunneler ,WARNING 3,"Failed to read in AGSOCKSClient, err = -8000...

Secure Mail - Error: Access to your company network is not available

Secure Mail Client when entering the Mail Server FQDN for first time sync returns the Error "Access to your company network is not available"...

mailing.iway.ch XSS vulnerability

Open Bug Bounty ID: OBB-177992 Description| Value ---|--- Affected Website:| mailing.iway.ch Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

WordPress ALO EasyMail Newsletter Plugin Cross-Site Request Forgery Vulnerability

The ALO EasyMail Newsletter plugin provides list management results, and it is necessary to read emails from the mail server, so this plugin also stores the login information of the mail server explicitly in the WordPress database. The WordPress Plugin ALO EasyMail Newsletter suffers from a...

SQL Injection Vulnerability in Remote DBMail Mail Server

DBMail is a database-enabled enterprise mail system developed by TeleSoft. A SQL injection vulnerability exists in Telezine DBMail Mail Server V5.0 updated 2016.07.08. The vulnerability is allowed to be exploited by an attacker to gain access to sensitive database information...

mail.onlinemed.de XSS vulnerability

Vulnerable URL: https://mail.onlinemed.de/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Unauthorized Access and Brute Force Breach Vulnerability in TurboMail Mail Server System

TurboMail email system is an email server system developed for the communication needs of enterprises and institutions. TurboMail Email Server System has unauthorized access and brute force vulnerabilities that allow attackers to exploit the vulnerabilities for unauthorized access, which can be...

Design/Logic Flaw

The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover a cleartext mail-server password via unspecified vectors...

CVE-2016-2294

The CVE-2016-2294 entry affects the AXM-NET module of Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08. The root cause is plaintext storage of a mail-server password in an unprotected file, enabling remote attackers to discover the password via unspecified vectors. Publicly...

Accuenergy Acuvim II and IIR AXN-NET Module Information Disclosure Vulnerability

Accuenergy Acuvim II and IIR are Accuenergy's multi-function network power meters that provide power parameter measurement, four-quadrant power metering, and out-of-limit alarms.AXN-NET is one of the Ethernet module accessories. The AXN-NET module of the Accuenergy Acuvim II and IIR stores mail...

OpenSSL DROWN drown vulnerability detection and repair method-vulnerability warning-the black bar safety net

A, vulnerability Description: The now popular server and client to use TLS encryption,SSL and TLS protocols to ensure that users are surfing the Internet,shopping,instant messaging and not be read by third parties. DROWNdrownvulnerabilities allow an attacker to compromise the encryption system,by...

Paragon Initiative Enterprises: Email spoofing

There are few email spoofing tool is available free.one them is http://emkei.cz/ when I tried to send a email from [email protected] to my email ,it was successful but when i tried to send the another from [email protected] , i did not receive any email.Hence, there might be some...

[SECURITY] Fedora 21 Update: zarafa-7.1.14-1.fc21

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

CVE-2015-5040

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service SMTP daemon crash via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than...

Axigen Messaging Axigen Mail Server Cross-Site Scripting Vulnerability

Axigen Messaging Axigen Mail Server is a small mail server that can be used in conjunction with services such as SMTP, IMAP and WebMail. Axigen Messaging Axigen Mail Server suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HT...

Courier Mail Server Memory Corruption Vulnerability

Courier Mail Server is a mail transfer proxy server that provides ESMTP, IMAP, POP3, SMAP, webmail and mailing list services. A memory corruption vulnerability exists in Courier Mail Server, which allows remote attackers to exploit the vulnerability to submit a special request that could crash th...

Non Compliant UUencoded SMTP

Unexpected characters in UUencoded SMTP data which cannot be decoded might indicate an attempt to attack the mail server...

[SECURITY] Fedora 21 Update: zarafa-7.1.12-1.fc21

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

Websense TRITON AP-EMAIL mail server plaintext password vulnerability

Websense TRITON is the Unified Content Architecture for data security. The Websense TRITON AP-EMAIL mail server uses plaintext password storage, allowing remote attackers to exploit vulnerabilities to gain access to sensitive information...