4372 matches found
webmail.keralataxes.gov.in XSS vulnerability
Vulnerable URL: http://webmail.keralataxes.gov.in/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
webmail.adccinfocad.com XSS vulnerability
Vulnerable URL: http://webmail.adccinfocad.com/?user=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
webmail.lessonpathways.com Open Redirect vulnerability
Vulnerable URL: http://webmail.lessonpathways.com/Redirect?path=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:40 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...
Fedora 23 : roundcubemail (2016-396403ec02)
Upstream announcement: Roundcube Webmail 1.2.0 released Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
webmail.co.za XSS vulnerability
Vulnerable URL: http://www.webmail.co.za/login.php?msg=...
Mimikittenz - Post-Exploitation Powershell Tool for Extracting Juicy info from Memory
mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns including but no...
Post Exploitation Powershell Tool: mimikittenz
Post Exploitation Powershell Tool mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes usi...
[SECURITY] [DLA 537-1] roundcube security update
Package : roundcube Version : 0.7.2-9+deb7u3 CVE ID : CVE-2015-8864 Roundcube, a webmail solution for IMAP servers, was susceptible to cross-site-scripting XSS vulnerabilities when handling SVG images. When right-clicking on the download link of an attached image, it was possible that embedded...
DLA-537-1 roundcube - security update
Bulletin has no description...
TodayMail email system/webmail/tools/getpopmail. php file popid parameter SQL injection vulnerability
No description provided by source...
TodayMail email system/webmail/tools/cardList. php file sort_by parameter SQL injection vulnerability
No description provided by source...
[SECURITY] Fedora 24 Update: roundcubemail-1.2.0-1.fc24
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
TodayMail mail system webmail/main/letter.inc.php file typeid parameter SQL vulnerability
No description provided by source...
[SECURITY] Fedora 22 Update: roundcubemail-1.2.0-1.fc22
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
AfterLogic WebMail Pro ASP.NET Account Takeover / XXE Injection
No description provided by source...
RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-03672)
RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in the email content page of RoundCube Webmail. An attacker can exploit this vulnerability to inject arbitrar...
AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection
AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection 1. ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro...
AfterLogic WebMail Pro ASP.NET Account Takeover / XXE Injection
ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely Exploitable: Yes Versions Affected: AfterLogic WebMail...
AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure (via XXE Injection)
Exploit for asp platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely...
AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection
ADVISORY INFORMATION ======================================== Title: AfterLogic WebMail Pro ASP.NET Administrator Account Takover via XXE Injection Application: AfterLogic WebMail Pro ASP.NET Class: Sensitive Information disclosure Remotely Exploitable: Yes Versions Affected: AfterLogic WebMail...