15584 matches found
Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow
No description provided by source. $Id: mercurycrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Gordano NTMail 4.2 Web File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/279/info A vulnerability in Gordano's NTMail allows remote malicious users to steal local files. Gordano's NTMail is a Windows NT mail server program. One of its features is allowing administrators to configure the server...
Mercury Mail <= 4.01a (Pegasus) IMAP Buffer Overflow Exploit
No description provided by source. / Mercury imap4 server remote buffer overflow exploit author : c0d3r kaveh razavi [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not available right now company...
Microsoft Outlook 2003Mail Client E-mail Address Verification Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10323/info It has been reported that Microsoft Outlook mail client may be prone to a weakness that could allow a remote attacker to verify the validity of a recipient's e-mail address. This issue may result in a victim...
University of Washington Pico 3.x/4.x File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2097/info A vulnerability exists in several versions of University of Washington's Pico, a widely-distributed text editor shipped with most versions of Linux / Unix. Under very specific circumstances, it is possible to...
Apple MacOS Internet Explorer 3/4/5 File Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3935/info A vulnerability has been discovered in MacOS systems running Internet Explorer 5.1 and earlier. MacOS X is not affected by this issue. File URLs may be used by a malicious webmaster to execute programs on a web...
Concatus IMate Web Mail Server 2.5 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1286/info Sending an email to a Concatus IMate Web Mail Server 2.5 with a server name consisting of over 1119 characters will cause the application to crash. Restarting the program is required in order to regain normal...
Majordomo 1.89/1.90 lists Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to execute...
IceWarp Web Mail 5.5.1 calendar_m.html createdataCX Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14980/info IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Exim Sender 3.35 Verification Remote Stack Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be triggered by a malicious e-mail...
Hastymail 1.x IMAP SMTP Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP commands o...
PHP-Nuke 6.0 Web Mail Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6400/info A vulnerability has been discovered in the PHP-Nuke web mail module. Due to insufficient sanitization of HTML emails it is possible for an attacker to embed script code into malicious messages. Opening an email...
Rumble 0.25.2232 Denial of Service Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................Rumble 0.25.2232 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://humbedooh.users.sourceforge.net/...
SGI IRIX <= 6.4 rmail Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/460/info A vulnerability exists in the rmail utility, included by SGI with it's Irix operating system. By failing to sanity check the contents of an environment variable, arbitrary commands may be executed with gid mail...
I-net Multi User Email Script SQLi Vulnerability
No description provided by source. Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r...
TCLHttpd 3.4.2 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/8688/info It has been reported that several of the modules included with TCLHTtpd are vulnerable to cross-site scripting attacks. According to the report, the Status, Debug, Mail and Admin modules are affected by these...
phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit
No description provided by source. !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford xbefordx gmail com Vulnerability: mail Injection Vuln Code: ?php if eregnumail.inc.php, $SCRIPTNAME headerLocation:./index.html; elseif eregnumail.inc.php,...
yPlay 1.0.76 (.mp3) Local Crash PoC
No description provided by source. !/usr/bin/perl Usage--file created--load file--b00m.mp3 BOOM print \n; print ! yPlay 1.0.76 .mp3 Local Crash PoC\n; print \n; print ! Author: cr4wl3r\n; print ! Mail: cr4wl3r!linuxmail.org\n; print \n; my $boom = A x 1337; my $filename = b00m.mp3; open...
ZipItFast 3.0 - (.ZIP) Heap Overflow Exploit
No description provided by source. !/usr/bin/perl +Exploit Title: ZipItFast v3.0 .ZIP File Heap Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipItFast---Zip-It-Free-Vprogram22803.html +Version: v3.0 +Tested On: WIN-XP SP3 Brazilian Portugue...
Avirt Gateway Suite 3.3/3.3 a/3.5 Directory Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to create a directory...