46 matches found
VIM 8.2 - Denial of Service (PoC)
Exploit Title: VIM 8.2 - Denial of Service PoC Date: 2019-12-17 Vulnerability: DoS Vulnerability Discovery: Dhiraj Mishra Vulnerable Version: VIM - Vi IMproved 8.2 Included patches: 1-131 Vendor Homepage: https://www.vim.org/ References:...
VIM 8.2 - Denial of Service Exploit
Exploit Title: VIM 8.2 - Denial of Service PoC Vulnerability: DoS Vulnerability Discovery: Dhiraj Mishra Vulnerable Version: VIM - Vi IMproved 8.2 Included patches: 1-131 Vendor Homepage: https://www.vim.org/ References: https://github.com/vim/vim/commit/98a336dd497d3422e7efeef9f24cc9e25aeb8a49...
Sql injection
SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...
CVE-2013-5028
SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...
CVE-2013-5028: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...
CVE-2008-1277: Improper Input Validation
The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search command. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Mercury IMAP Server <= 4.52 SEARCH Command Buffer Overflow
Binary data 4220.prm...
Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow
Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found & Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void ph4nt0m.org S: pst06 OK LOGIN completed. C: pst06...
Ipswitch IMail Server IMAP SEARCH Command Date String Stack Overflow (CVE-2007-3925)
...
SurgeMail SEARCH命令远程栈缓冲区溢出漏洞
BUGTRAQ ID: 25318 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 SurgeMail在处理带有超长畸形参数的SEARCH命令时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果对SurgeMail提交了有超长参数的IMAP SEARCH命令的话，就可能触发栈溢出，导致执行任意指令。 NetWin SurgeMail 38k 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Stack overflow
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372...
CVE-2007-4377: Undefined Security Weakness
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372...
Ipswitch IMail Server SEARCH命令远程缓冲区溢出漏洞
BUGTRAQ ID: 25176 Ipswitch IMail Server是Ipswitch协作组件中捆绑的一个邮件服务器。 IMail服务器处理SEARCH命令请求的参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 IMail服务器在处理SEARCH命令的多个选项（BEFORE,ON,SINCE,SENTBEFORE,SENTON,SENTSINCE）时存在栈缓冲区溢出问题，远程攻击者可以通过提交畸形超长的SEARCH请求触发溢出，导致执行任意指令。 Ipswitch IMail Premium 2006.2 Ipswitch IMail 2006.21...
IPSwitch IMail Server 2 0 0 6 SEARCH Remote Stack Overflow Exploit-vulnerability warning-the black bar safety net
!/ use/bin/perl Ipswitch IMail Server 2 0 0 6 IMAP SEARCH COMMAND Stack Overflow Exploit Author: ZhenHan.Liuph4nt0m.org Date: 2007-07-25 Team: Ph4nt0m Security Team http://www.ph4nt0m.org Vuln Found by: Manuel Santamarina Suarez...
IPSwitch IMAIL IMAP server buffer overflow
Buffer overflow in SEARCH and SUBSCRIBE commands and also during authentication procedure...
IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow
!/use/bin/perl Ipswitch IMail Server 2006 IMAP SEARCH COMMAND Stack Overflow Exploit Author: ZhenHan.Liuph4nt0m.org Date: 2007-07-25 Team: Ph4nt0m Security Team http://www.ph4nt0m.org Vuln Found by: Manuel Santamarina Suarez http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563...
IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow
IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow !/use/bin/perl Ipswitch IMail Server 2006 IMAP SEARCH COMMAND Stack Overflow Exploit Author: ZhenHan.Liuph4nt0m.org Date: 2007-07-25 Team: Ph4nt0m Security Team http://www.ph4nt0m.org Vuln Found by: Manuel Santamarina Suarez...
CVE-2007-3925: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in the IMAP service imapd32.exe in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the 1 Search or 2 Search Charset command...