CVE-2021-39683

In copyfrommbox of sssiceutil.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2025-8467

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak was identified in the Linux kernel, specifically in the lpfc driver. The issue occurs when handling NPIV PLOGI RJT responses, where memory allocated for service...

CVE-2021-44937

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...

CVE-2021-44937

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...

CVE-2021-44937

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...

Design/Logic Flaw

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...

CVE-2021-44937

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...

The vulnerability of the EXAMINE command implementation in the IMAP service of the IBM Domino email system allows a perpetrator to execute arbitrary code.

The vulnerability of the EXAMINE command implementation in the IMAP service of the IBM Domino email system is related to the escape of operations beyond the buffer in memory during the processing of mailbox names. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

CVE-2021-26331

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

CVE-2021-26331

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

CVE-2021-41581

x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAINPARTMAXLEN, the buffer lacks '\0' termination...

PT-2021-23347 · Openssl +1 · Libressl +1

Name of the Vulnerable Software and Affected Versions: LibreSSL versions through 3.4.0 Description: The issue is related to a stack-based buffer over-read in the x509 constraints parse mailbox function in lib/libcrypto/x509/x509 constraints.c. This occurs when the input exceeds DOMAIN PART MAX LE...

LibreSSL 缓冲区错误漏洞

LibreSSL is an open source implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL 3.4.0 and earlier versions has a stack buffer overflow vulnerability. No detailed vulnerability...

CVE-2020-19915

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

CVE-2020-19915

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

CVE-2020-19915

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

curl: CVE-2021-22947: STARTTLS protocol injection via MITM

Summary: A man-in-the-middle can inject cleartext forged responses to future encrypted commands by pipelining them to the STARTTLS response. Steps To Reproduce: Use the attached test case within the curl test system. It is based on IMAP FETCH with explicit TLS. Upon test failure, the downloaded...

KnockOutlook - A Little Tool To Play With Outlook

"The best feeling is to win by knockout." - Nonito Donaire Overview KnockOutlook is a C project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements. Command Line Usage metadata of every account search : search for the provided keyword...

New Microsoft Exchange 'ProxyToken' Flaw Lets Attackers Reconfigure Mailboxes

Details have emerged about a now-patched security vulnerability impacting Microsoft Exchange Server that could be weaponized by an unauthenticated attacker to modify server configurations, thus leading to the disclosure of Personally Identifiable Information PII. The issue, tracked as...