[SECURITY] Fedora 20 Update: thunderbird-31.6.0-1.fc20

Mozilla Thunderbird is a standalone mail and newsgroup client...

Zend Zend\Mail / Zend\Http Component HTTP Response Splitting Vulnerability

Zend Framework is an open source framework for developing web programs and services with PHP. A security vulnerability in Zend Framework, which is used by the Zend Zend\Mail / Zend\Http component, could be exploited by remote attackers to conduct HTTP response splitting attacks...

Potential CRLF injection attacks in mail and HTTP headers

More info at https://framework.zend.com/security/advisory/ZF2015-04...

Potential CRLF injection attacks in mail and HTTP headers

More info at https://framework.zend.com/security/advisory/ZF2015-04...

Potential CRLF injection attacks in mail and HTTP headers

More info at https://framework.zend.com/security/advisory/ZF2015-04...

iPassword Manager v2.6 iOS - Persistent Vulnerabilities

Document Title: =============== iPassword Manager v2.6 iOS - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1453 Release Date: ============= 2015-04-21 Vulnerability Laboratory ID VL-ID: ==================================== 14...

[SECURITY] Fedora 22 Update: clamav-0.98.7-1.fc22

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] Fedora 21 Update: clamav-0.98.7-1.fc21

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the slrn-0.9.6.4 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

[SECURITY] Fedora 21 Update: zarafa-7.1.12-1.fc21

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

TAGAWA Takao TransmitMail Cross-Site Scripting Vulnerability

TAGAWA Takao TransmitMail is a PHP-based mail program. TAGAWA Takao TransmitMail suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user sessions...

TransmitMail vulnerable to cross-site scripting

Overview TransmitMail is a PHP based mail form. TransmitMail contains a cross-site scripting CWE-79 vulnerability due to the processing of file names. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

Socrata Online Service Script Insertion

Document Title: =============== Socrata Bug Bounty 1 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1438 Release Date: ============= 2015-04-22 Vulnerability Laboratory ID VL-ID: ====================================...

U-Mail mail system bulk getshell（truly unlimited, no General account-the vulnerability warning-the black bar safety net

The mail system is there any user login, and the presence of injection, which can be unlimited perfect getshell（getshell process only takes three simple. Mad Dog, this is not struck by lightning while waiting to be burst chrysanthemum. Detailed description: 1. Mail System Description 1 Official...

Threat Outbreak Alert RuleID14838: Email Messages Distributing Malicious Software on April 22, 2015

Medium Alert ID: 38491 First Published: 2015 April 22 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14838 may contain the following files: Name | Si...

Socrata Bug Bounty #1 - Persistent Encoding Vulnerability

Document Title: =============== Socrata Bug Bounty 1 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1438 Release Date: ============= 2015-04-22 Vulnerability Laboratory ID VL-ID: ====================================...

iPassword Manager 2.6 Script Insertion

Document Title: =============== iPassword Manager v2.6 iOS - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1453 Release Date: ============= 2015-04-21 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Socrata Bug Bounty #1 - Persistent Encoding Vulnerability

Document Title: =============== Socrata Bug Bounty 1 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1438 Release Date: ============= 2015-04-22 Vulnerability Laboratory ID VL-ID: ====================================...

[SECURITY] Fedora 22 Update: seamonkey-2.33.1-1.fc22

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

iPassword Manager v2.6 iOS - Persistent Vulnerabilities

Document Title: =============== iPassword Manager v2.6 iOS - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1453 Release Date: ============= 2015-04-21 Vulnerability Laboratory ID VL-ID: ==================================== 14...