15593 matches found
GKrellM Mailwatch Plugin 2.4.1/2.4.2 From Header Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8118/info It has been reported that the Mailwatch plugin for GKrellM is vulnerable to a remotely exploitable buffer overflow. This may permit the execution of arbitrary code with the privileges of the GKrellM program. /...
SMF Mod Member Awards 1.0.2 - Blind SQL Injection Exploit
No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...
Outlook ATTACH_BY_REF_RESOLVE File Execution
No description provided by source. $Id: ms10045outlookrefresolve.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
AA SMTP Server 1.1 - Crash PoC
No description provided by source. ========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 sonicdefenceatgmail.com...
IceWarp Web Mail 5.5.1 calendar_d.html createdataCX Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14980/info IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Microsoft Outlook Express 5.5 DoS Device Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4584/info A denial of service issue has been reported in Microsoft Outlook Express. Reportedly, Outlook Express does not adequately handle unusually crafted HTML mail messages. Modifying the BGSOUND or IFRAME tag to conta...
Google Chrome 8.0.552.237 - .replace DoS
No description provided by source. html head Exploit Title: Google Chrome v8.0.552.237 .replace DOS Date: January 30 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.google.com/chrome Version: v8.0.552.237 Tested on: Windows xp sp3 ,windows 7 ,linux running on VMware Fusion 3....
VLC Player 2.0.8 (.m3u) - Local Crash PoC
No description provided by source. Exploit Title: VLC Player 2.0.8 = Local Crash PoC Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and variou...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (2nd)
No description provided by source. / Hosting Controller = v6.1 exploit sileHOSTCxpl This exploit utilize two ways for exploiting vulnerability present into Hosting Controller. This exploit create new user with relative passwd and registered your host with mail server into Hosting Controller...
Seattle Lab Mail 5.5 - POP3 Buffer Overflow
No description provided by source. $Id: seattlelabpass.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
phpCOIN 1.2 mod.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/12686/info Multiple remote input-validation vulnerabilities affect phpCOIN because the application fails to properly sanitize user-supplied input before using it to carry out critical functionality. An attacker may levera...
Stalker Internet Mail Server 1.6 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/62/info There exists a buffer overflow in the Stalker Internet Mail Server version 1.6. If you connect to the SMTP port and issue a HELO command with a large string several hundred bytes for a hostname the server, and...
Multiple MicroWorld eScan Products Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with...
Pine 4.x Empty MIME Boundary Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5301/info Pine is an open source mail user agent distributed by the University of Washington. It is freely available for Unix, Linux, and Microsoft Operating Systems. When a mail is received by pine that contains MIME...
PineApp Mail-SeCure ldapsyncnow.php Arbitrary Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Mambo Site Server 4.0.14 contact.php Unauthorized Mail Relay
No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...
Solaris 7.0 CDE dtmail/mailtool Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/832/info here are three buffer overflow vulnerabilities in the CDE mail utilities, all of which are installed sgid mail by default. The first is exploited through overrunning a buffer in the Content-Type: field, which wou...
Floosietek FTGate 2.1 Web File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/280/info A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of...
FloosieTek FTGatePro 1.22 Mail Server Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8528/info FloosieTek FTGatePro Mail Server is prone to a cross-site scripting vulnerability. A remote attacker could exploit this issue by enticing a legitimate user of the mail server to follow a malicious link with...
Solaris 8 mailtool Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2787/info The mailtool program included with OpenWindows in Solaris, contains a buffer overflow vulnerability which may allow local users to execute arbitrary code/commands with group 'mail' privileges. The overflow occur...