CVE-2007-5046

Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...

Cross site scripting

Cross-site scripting XSS vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element...

IceWarp Merak Mail Server < 9.0.0 BODY Element XSS

The remote host is running IceWarp Merak Mail Server - a webmail server for Windows and Linux. According to its banner, the version of IceWarp installed on the remote host fails to properly sanitize email messages before displaying them. If a user reads a specially crafted message, a remote...

CVE-2007-5046

CVE-2007-5046 describes a cross-site scripting (XSS) flaw in the Webmail interface of IceWarp Merak Mail Server prior to 9.0.0. The vulnerability allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an element attribute within an email message body, demonstrated by an o...

Microworld eScan (Multiple Products) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

DSA-1359-1 dovecot - directory traversal

Bulletin has no description...

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMT...

Mercury/32 Mail Server 3.32 < 4.51 - SMTP EIP Overwrite

/ Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP overwrite exploit Exploit date :...

Mercury SMTPD Remote Preauth Stack Based Overrun PoC

No description provided by source. If there are images in this attachment, they will not be displayed. Download the original attachment Mercury Mail Transport System Remote Stack Based Overflow Overview Mercury Mail Transport System: Mercury is a free, standards-based mail server solution,...

ArgoSoft Mail Server MLSRVX.DLL任意文件覆盖漏洞

ArgoSoft Mail Server是一款多功能的邮件服务程序。 ArgoSoft Mail Server存在任意文件覆盖问题，远程攻击者可以利用漏洞进行拒绝服务攻击。 问题存在于MLSRVX.DLL中。使用恶意的ActiveX控件，调用不安全的方法，诱使用户访问可覆盖目标用户系统上的文件，造成拒绝服务攻击，或可能以登录用户进程权限执行任意指令。 ArGo Software Design ArGoSoft Mail Server 1.8.9.1 目前没有解决方案提供： http://www.argosoft.com/rootpages/MailServerNet/Default.as...

argo-exec.txt

GoodFellas Security Research Team Technical Details ----------------- Telnet service will be started in 2 reboot. Any other kind of exploit could be easily set up because the atta...

mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Remote Code Execution

No description provided by source. !-- ---------------------------------------------------------------------------- :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Arbitrary Data Write & Remote Code Execution...

mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server - Data WriteCode Execution

mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server - Data WriteCode Execution GoodFellas Security Research Team Technical Details ----------------- Telnet service will be started in 2 reboot. Any other kind of exploit could be easily set up because the attacker can write files and put specific data...

mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Code Execution

Exploit for unknown platform in category remote exploits ================================================================= mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Code Execution ================================================================= GoodFellas Security R...

mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Code Execution

No description provided by source. !-- ---------------------------------------------------------------------------- :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Arbitrary Data Write & Remote Code Execution...

mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server - Data Write/Code Execution

GoodFellas Security Research Team Technical Details ----------------- Telnet service will be started in 2 reboot. Any other kind of exploit could be easily set up because the attacker can write files and put specific data into these files. Attacker could also encrypt easily the HTML file u...

[SECURITY] Fedora 7 Update: clamav-0.90.3-1.fc7

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

602pro Lan Suite 2003 buffer overflow vulnerability

Overview 602pro Lan Suite 2003 contains a buffer overflow vulnerability that may allow an attacker to execute code. Description 602pro Lan Suite 2003 is a mail, firewall and proxy server that runs on the Microsoft Windows operating system.The 602pro Lan Suite 2003 SMTP server contains a buffer...

[SECURITY] Fedora Core 5 Update: spamassassin-3.1.9-1.fc5.1

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

Security Vulnerability in APOP Authentication — Mozilla

Gaëtan Leurent informed us of a weakness in APOP authentication that could allow an attacker to recover the first part of your mail password if the attacker could interpose a malicious mail server on your network masquerading as your legitimate mail server. With normal settings it could take...