15538 matches found
CVE-2016-7844
GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via specially crafted mail template...
CVE-2016-7844
GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via specially crafted mail template...
CVE-2016-7844
GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via specially crafted mail template...
CVE-2016-7844
CVE-2016-7844 is linked to GigaCC OFFICE, with affected versions up to 2.3 and earlier. The connected JVN entry (J VNDB-2017-001053) identifies the root cause as a misconfiguration of the Apache Velocity template engine used for sending emails. This misconfiguration can allow a remote attacker to...
Unspecified Vulnerability in Oracle Communications Convergence
Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Communications Convergence is one of the components used for cable communications. A security vulnerability exists in the Mail Proxy dojo subcomponent of the Communications...
CVE-2017-11726
services/systemio/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery CSRF, as demonstrated by changing an e-mail address setting...
Legal Robot: Lack of input validation in e-mail & user name, job title, company name field
Hi, During sign up input validation didn't deploy properly on e-mail & name field. I've tested inputing following e-mail during sign up: hacker%@gmail.com Your system send email to verification the account though the e-mail address is invalid as gmail doesn't allow user to sign up using special...
E-mail Address Disclosure
Moodle is vulnerable to e-mail address disclosure. Moodle grants excessive authorization through the moodle/course:viewhiddenuserfields. Authenticated users can find student e-mail addresses using a teacher role and looking at the participants list...
Remote Code Execution (RCE)
PHPMailer is vulnerable to remote code execution RCE attacks. A malicious user can inject and execute arbitrary code by passing extra parameters to the mail command. This is due to the improper interaction with the library's escapeshellarg function and internal escaping function performed in PHP...
Secure Mail: How to edit the MDX file for enabling/disabling the hidden policy.
Enable/Disable the hidden policy for Secure Mail: ex "AutoPopulateusernametitle"...
iOS Secure Mail cannot add account, error "Connection Error. Secure Mail cannot access server"
iOS Secure Mail cannot add account, error "Connection Error. Secure Mail cannot access server"...
[SECURITY] Fedora 25 Update: glpi-9.1.5-1.fc25
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
[SECURITY] Fedora 26 Update: glpi-9.1.5-1.fc26
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
Inmarsat AmosConnect8 Mail Client Vulnerable to SQL Injection and Backdoor Account
Overview Inmarsat Solutions offers a shipboard email client service, AmosConnect 8 AC8, which was designed to be utilized over satellite networks in a highly optimized manner. IOActive has identified two security vulnerabilities in the client software: On-board ship network access could provide...
Modified Versions of Nukebot in Wild Since Source Code Leak
Some opportunistic criminals have put the leaked source code for the Nukebot banking Trojan to use, targeting banks in the United States and France with variants of the malware, while another group has adapted it to steal mail client and browser passwords. The leak was disclosed in early March wh...
CVE-2017-11349
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data...
CVE-2017-11349
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data...
Fedora 26 : 1:dovecot (2017-e8b639c286)
quota: Add plugin quotamaxmailsize setting to limit the maximum individual mail size that can be saved. + imapc: Add imapcfeatures=delay-login. If set, connecting to the remote IMAP server isn't done until it's necessary. + imapc: Add imapcconnectionretrycount and imapcconnectionretryinterval...
Zoho Mail Admin - Corrupted files, Customized SSL, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Zoho Mail Admin published at the 'play' market has multiple vulnerabilities...