Morris Worm sendmail Debug Mode Shell Escape Exploit

This Metasploit module exploits sendmail's well-known historical debug mode to escape to a shell and execute commands in the SMTP RCPT TO command. This vulnerability was exploited by the Morris worm in 1988-11-02. Cliff Stoll reports on the worm in the epilogue of The Cuckoo's Egg. Currently only...

Morris Worm sendmail Debug Mode Shell Escape

This module exploits sendmail's well-known historical debug mode to escape to a shell and execute commands in the SMTP RCPT TO command. This vulnerability was exploited by the Morris worm in 1988-11-02. Cliff Stoll reports on the worm in the epilogue of The Cuckoo's Egg. Currently, only...

[SECURITY] Fedora 27 Update: spamassassin-3.4.2-2.fc27

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

nakoudo.biz XSS vulnerability

Open Bug Bounty ID: OBB-677464 Description| Value ---|--- Affected Website:| nakoudo.biz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NtlmRelayToEWS - Ntlm Relay Attack To Exchange Web Services

ntlmRelayToEWS is a tool for performing ntlm relay attacks on Exchange Web Services EWS. It spawns an SMBListener on port 445 and an HTTPListener on port 80, waiting for incoming connection from the victim. Once the victim connects to one of the listeners, an NTLM negociation occurs and is relaye...

ZZCMS SQL Injection Vulnerability (CNVD-2018-15398)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the dl/dlsendmail.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the administrator password with the help of the 'sql' paramet...

CVE-2018-14961

dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...

Sendmail Service Detection

Binary data sendmaildetect.nbin...

shadowbroker

This repository, jasonhan233/shadowbroker, is an offensive tool collection containing exploits and payloads. The repository was initially reported for containing sensitive data, and several files were deleted as a result. The remaining files include a mix of exploit code, payloads, and...

Cross site scripting

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formnickname parameter to the index.php?m=core&f=set&v=sendmail URI. When the administrator accesses the "system settings - mail server"...

PT-2018-12556 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the formnickname parameter to the "index.php?m=core&f=set&v=sendmail" API endpoint. The XSS payload is triggered wh...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-14090)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject arbitrary Web script or HTML by sending the 'formnickname'...

Schneider Electric U.motion Builder sendmail email_attachment parameter information disclosure vulnerability

U.motion Builder is a builder product from Schneider Electric France. An information disclosure vulnerability exists in the handling of the Schneider Electric U.motion Builder sendmail emailattachment parameter in sendmail.php, which can be exploited by an attacker to select arbitrary files to be...

AIX 7.1 TL 4 : sendmail (IJ02917)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 7.2 TL 0 : sendmail (IJ02918)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 6.1 TL 9 : sendmail (IJ02915)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 5.3 TL 12 : sendmail (IJ03273)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 7.2 TL 1 : sendmail (IJ02919)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 7.2 TL 2 : sendmail (IJ02920)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...

AIX 7.1 TL 5 : sendmail (IJ03121)

https://vulners.com/cve/CVE-2014-3956 https://vulners.com/cve/CVE-2014-3956 The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file...