Lucene search
+L

3 matches found

Hacker One
Hacker One
•added 2017/05/13 9:57 a.m.•61 views

Paragon Initiative Enterprises: Directory Disclose,Email Disclose Zendmail vulnerability

i found three vulnerability Directory information disclose,Email address disclose, and possible Remote code execution in Zendmail during signup your code accept username with ',",/,@ while all of the special character must be forbidden or encoded in username Directory Disclose: 1. goto sign-up pa...

7.5CVSS9.6AI score0.38438EPSS
SaveExploits10
The Hacker News
The Hacker News
•added 2017/01/02 11:45 p.m.•77 views

Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail

A security researcher recently reported a critical vulnerability in one of the most popular open source PHP libraries used to send emails that allowed a remote attacker to execute arbitrary code in the context of the web server and compromise a web application. Disclosed by Polish security...

7.5CVSS8.3AI score0.99714EPSS
SaveExploits72
Positive Technologies
Positive Technologies
•added 2015/05/20 12:00 a.m.•1 views

PT-2020-7833

Name of the Vulnerable Software and Affected Versions: Zend Framework versions prior to 1.12.12 Zend Framework 2.x versions prior to 2.3.8 Zend Framework 2.4.x versions prior to 2.4.1 Description: A CRLF injection vulnerability in ZendMail Zend Mail allows remote attackers to inject arbitrary HTT...

6.1CVSS0.01009EPSS
SaveExploits1References23
Rows per page
Query Builder