4342 matches found
DEBIAN-CVE-2016-4069
Cross-site request forgery CSRF vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service disk consumption via unspecified vectors...
CVE-2016-4069
Cross-site request forgery CSRF vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service disk consumption via unspecified vectors...
CVE-2016-4069
Roundcube Webmail is affected by CVE-2016-4069 (CSRF) in versions before 1.1.5. The vulnerability allows remote attackers to hijack user authentication for requests that download attachments, leading to a denial of service (disk consumption) via unspecified vectors. The available documents do not...
CVE-2016-4069
Cross-site request forgery CSRF vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service disk consumption via unspecified vectors...
webmail.ac-lille.fr XSS vulnerability
Vulnerable URL: https://webmail.ac-lille.fr/filex/upload/" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
webmail.designtechsys.com XSS vulnerability
Vulnerable URL: http://webmail.designtechsys.com/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
webmail.waxpol.com XSS vulnerability
Vulnerable URL: http://webmail.waxpol.com/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...
webmail.coldex.in XSS vulnerability
Vulnerable URL: http://webmail.coldex.in/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...
webmail.paysquare.com XSS vulnerability
Vulnerable URL: http://webmail.paysquare.com/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...
webmail.premier.co.in XSS vulnerability
Vulnerable URL: http://webmail.premier.co.in/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...
webmail.keralataxes.gov.in XSS vulnerability
Vulnerable URL: http://webmail.keralataxes.gov.in/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
webmail.adccinfocad.com XSS vulnerability
Vulnerable URL: http://webmail.adccinfocad.com/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
webmail.lessonpathways.com Open Redirect vulnerability
Vulnerable URL: http://webmail.lessonpathways.com/Redirect?path=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:40 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...
Fedora 23 : roundcubemail (2016-396403ec02)
Upstream announcement: Roundcube Webmail 1.2.0 released Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
webmail.co.za XSS vulnerability
Vulnerable URL: http://www.webmail.co.za/login.php?msg=...
Mimikittenz - Post-Exploitation Powershell Tool for Extracting Juicy info from Memory
mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns including but no...
Post Exploitation Powershell Tool: mimikittenz
Post Exploitation Powershell Tool mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes usi...
[SECURITY] [DLA 537-1] roundcube security update
Package : roundcube Version : 0.7.2-9+deb7u3 CVE ID : CVE-2015-8864 Roundcube, a webmail solution for IMAP servers, was susceptible to cross-site-scripting XSS vulnerabilities when handling SVG images. When right-clicking on the download link of an attached image, it was possible that embedded...
