713 matches found
CVE-2019-19497
MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message...
CVE-2019-19497
CVE-2019-19497 affects MDaemon Email Server 17.5.1 and is a Cross‑Site Scripting (XSS) vulnerability triggered by the filename of an email attachment. Public docs identify the root cause as a lack of proper validation of client‑side data by the web application, enabling injection of script throug...
CVE-2019-19497: Improper Neutralization of Input During Web Page Generation
MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message...
Alt-N MDaemon Mail Server Detection (HTTP)
HTTP based detection of Alt-N MDaemon Mail Server. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
shadowbroker
This repository, "Cross6/shadowbroker", contains a collection of exploits and tools leaked by the Shadow Brokers, a group known for releasing sensitive information. The repository includes a README file that lists the contents of the repository, which includes various exploit modules and tools...
MDaemon Webmail Cross-Site Request Forgery Vulnerability
MDaemon Technologies MDaemon Webmail formerly known as WorldClient is a Web-based e-mail client for MDaemon Email Server from MDaemon Technologies. A cross-site request forgery vulnerability exists in MDaemon Webmail. The vulnerability stems from a WEB application that does not adequately validat...
CVE-2018-17792
MDaemon Webmail formerly WorldClient has CSRF...
CVE-2018-17792
MDaemon Webmail formerly WorldClient has CSRF...
Cross site request forgery (csrf)
MDaemon Webmail formerly WorldClient has CSRF...
CVE-2018-17792
MDaemon Webmail formerly WorldClient has CSRF...
CVE-2018-17792
CVE-2018-17792 affects MDaemon Webmail (WorldClient). It is a Cross-Site Request Forgery (CSRF) in the web client. Exploitation could perform unintended actions for an authenticated user; CVSS2 base score 6.8 (MEDIUM) and CVSS3 base score 8.8 (HIGH) with network access, low attack complexity, no ...
CVE-2018-17792: Cross-Site Request Forgery (CSRF)
MDaemon Webmail formerly WorldClient has CSRF...
CVE-2019-13612
MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB and limits checks to 10 MB even with special configuration, which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious...
CVE-2019-13612
MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB and limits checks to 10 MB even with special configuration, which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious...
Code injection
MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB and limits checks to 10 MB even with special configuration, which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious...
CVE-2019-13612
MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB and limits checks to 10 MB even with special configuration, which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious...
CVE-2019-13612
CVE-2019-13612 affects MDaemon Email Server 19 through 20.0.1, where SpamAssassin checks are skipped by default for email messages larger than 2 MB and checks are limited to 10 MB even with configured options. The issue arises from the server’s filtering behavior rather than a generic vulnerabili...
CVE-2019-13612: Improper Input Validation
MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB and limits checks to 10 MB even with special configuration, which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious...