Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

4342 matches found

seebug.org
seebug.org•added 2016/06/21 12:0 a.m.•25 views

TodayMail email system/webmail/tools/cardList. php file sort_by parameter SQL injection vulnerability

No description provided by source...

7.1AI score
SaveExploits0
Fedora
Fedora•added 2016/06/18 7:56 p.m.•29 views

[SECURITY] Fedora 24 Update: roundcubemail-1.2.0-1.fc24

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

0.2AI score
SaveExploits0
seebug.org
seebug.org•added 2016/06/17 12:0 a.m.•26 views

TodayMail mail system webmail/main/letter.inc.php file typeid parameter SQL vulnerability

No description provided by source...

7.1AI score
SaveExploits0
Fedora
Fedora•added 2016/06/05 2:51 a.m.•50 views

[SECURITY] Fedora 22 Update: roundcubemail-1.2.0-1.fc22

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

0.2AI score
SaveExploits0
seebug.org
seebug.org•added 2016/05/30 12:0 a.m.•37 views

AfterLogic WebMail Pro ASP.NET Account Takeover / XXE Injection

No description provided by source...

7.1AI score
SaveExploits0
CNVD
CNVD•added 2016/05/27 12:0 a.m.•36 views

RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-03672)

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in the email content page of RoundCube Webmail. An attacker can exploit this vulnerability to inject arbitrar...

8.1AI score
SaveExploits0References1
exploitpack
exploitpack•added 2016/05/24 12:0 a.m.•31 views

AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection

AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection 1. ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro...

0.8AI score
SaveExploits0
Packet Storm
Packet Storm•added 2016/05/24 12:0 a.m.•60 views

AfterLogic WebMail Pro ASP.NET Account Takeover / XXE Injection

ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely Exploitable: Yes Versions Affected: AfterLogic WebMail...

0.6AI score
SaveExploits0
zdt
zdt•added 2016/05/24 12:0 a.m.•41 views

AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure (via XXE Injection)

Exploit for asp platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB•added 2016/05/24 12:0 a.m.•49 views

AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection

ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely Exploitable: Yes Versions Affected: AfterLogic WebMail...

5.3AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:43 a.m.•13 views

webmail.d172.s-cook.k12.il.us XSS vulnerability

Vulnerable URL: http://webmail.d172.s-cook.k12.il.us/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:39 a.m.•15 views

webmail.srb-civils.pl XSS vulnerability

Vulnerable URL: http://webmail.srb-civils.pl/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:39 a.m.•12 views

webmail.techno-path.com XSS vulnerability

Vulnerable URL: http://webmail.techno-path.com/-....--..1409474603/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:37 a.m.•16 views

webmail.fpcgil.it XSS vulnerability

Vulnerable URL: https://webmail.fpcgil.it/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:36 a.m.•16 views

townofosler.com XSS vulnerability

Open Bug Bounty ID: OBB-155386 Description| Value ---|--- Affected Website:| townofosler.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:35 a.m.•20 views

webmail.sitewise.nl XSS vulnerability

Vulnerable URL: http://webmail.sitewise.nl/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:35 a.m.•21 views

webmail.izdemir.com.tr XSS vulnerability

Vulnerable URL: http://webmail.izdemir.com.tr/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:34 a.m.•14 views

mail.enterpriseal.gov XSS vulnerability

Open Bug Bounty ID: OBB-155376 Description| Value ---|--- Affected Website:| mail.enterpriseal.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:34 a.m.•23 views

mail.kollektor.no XSS vulnerability

Vulnerable URL: http://mail.kollektor.no:9000/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2016/05/22 4:33 a.m.•11 views

webmail.redsquirrel.co.za XSS vulnerability

Vulnerable URL: http://webmail.redsquirrel.co.za/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

6.3AI score
SaveExploits0
Rows per page
Query Builder