2721 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag...
CVE-2007-0652
Cross-site request forgery CSRF vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag...
CVE-2007-0652
CVE-2007-0652 describes a CSRF vulnerability in MailEnable Professional prior to version 2.37 . An attacker can leverage a crafted link or IMG tag to cause an authenticated user to perform unauthorized actions, effectively allowing the attacker to modify arbitrary configurations and act as arbitr...
CVE-2007-0651
Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...
CVE-2007-0651
MailEnable Professional (before 2.37) is affected by CVE-2007-0651 with multiple XSS flaws in the Web Mail Client. The vulnerabilities allow remote injection of arbitrary JavaScript by exploiting unsanitized content in email messages and in the ID parameter for mewebmail/base/default/lang/EN/{rig...
Out-of-bounds
The NTLMUnPackType3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service application crash via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port 143/tcp, which results in an out-of-bounds read...
CVE-2007-0955
The NTLMUnPackType3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service application crash via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port 143/tcp, which results in an out-of-bounds read...
CVE-2007-0955
The CVE-2007-0955 entry concerns MailEnable Professional (version 2.35 and earlier) where the NTLM_UnPack_Type3 function in MENTLM.dll is vulnerable. Remote attackers can cause an application crash (DoS) by sending certain base64-encoded data after an AUTHENTICATE NTLM command to the IMAP port (1...
maildisable-v5.pl.txt
!/usr/bin/perl maildisable-v5.pl Mail Enable Professional/Enterprise Connected\n"; sendSOCKET, "1 AUTHENTICATE NTLM\r\n", 0; sleep$senddelay; $buf = $PAD x 12. "\xfa\xff\xff\xff". $PAD x 12; sendSOCKET, encodebase64$buf."\r\n", 0; sleep$senddelay; $buf = $PAD x 28. "\x00\x01". $PAD x 2...
MailEnable Professional/Enterprise <= 2.35 Out of Bounds DoS Exploit
No description provided by source. !/usr/bin/perl maildisable-v5.pl Mail Enable Professional/Enterprise =v2.35 win32 by mu-b - Wed Nov 29 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32 Mail Enable...
MailEnable Professional/Enterprise <= 2.37 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ==================================================================== MailEnable Professional/Enterprise Connected\n"; sendSOCKET, "1 AUTHENTICATE NTLM\r\n", 0; sleep$senddelay; $buf = $PAD x 12. "\xfa\xff\xff\xff". $PAD x 12; sendSOCKET,...
ActSoft DVD-Tools (dvdtools.ocx) Remote Buffer Overflow Exploit PoC
Exploit for unknown platform in category dos / poc =================================================================== ActSoft DVD-Tools dvdtools.ocx Remote Buffer Overflow Exploit PoC ===================================================================...
MailEnable ProfessionalEnterprise 2.37 - Denial of Service
MailEnable ProfessionalEnterprise 2.37 - Denial of Service !/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', %arg; use Socket; use MIME::Base64; my $target; i...
MailEnable Professional/Enterprise <= 2.37 Denial of Service Exploit
No description provided by source. !/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target...
MailEnable Professional/Enterprise <= 2.35 Out of Bounds DoS Exploit
Exploit for unknown platform in category dos / poc ==================================================================== MailEnable Professional/Enterprise Connected\n"; sendSOCKET, "1 AUTHENTICATE NTLM\r\n", 0; sleep$senddelay; $buf = $PAD x 12. "\xfa\xff\xff\xff". $PAD x 12; sendSOCKET,...
MailEnable Professional/Enterprise 2.35 - Out of Bounds Denial of Service
!/usr/bin/perl maildisable-v5.pl Mail Enable Professional/Enterprise Connected\n"; sendSOCKET, "1 AUTHENTICATE NTLM\r\n", 0; sleep$senddelay; $buf = $PAD x 12. "\xfa\xff\xff\xff". $PAD x 12; sendSOCKET, encodebase64$buf."\r\n", 0; sleep$senddelay; $buf = $PAD x 28. "\x00\x01". $PAD x 2...
MailEnable Professional/Enterprise 2.37 - Denial of Service
!/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if !defined$target my...
ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow (PoC)
------------------------------------------------------------------------------------------------- ActSoft DVD-Tools dvdtools.ocx Buffer Overflow developer's url: http://www.activex-soft.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...
Buffer overflow
Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrary code via certain executable files in PE format. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...