386 matches found
CVE-2013-6162
The CVE-2013-6162 entry affects Code-Crafters Ability Mail Server 3.1.1 (Ability Mail Server 2013). The connected sources detail a Stored XSS vulnerability: an attacker can inject arbitrary HTML/JavaScript via the body of an email, with PoCs showing stored XSS in e‑mail content and, in exploits, ...
CVE-2013-6162
Cross-site scripting XSS vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...
CVE-2013-6162: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...
Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting
!/usr/bin/env python ''' Exploit Title: Ability Mail Server 2013 Stored XSS Date: 12/20/2013 Exploit Author: David Um Vendor Homepage: http://www.code-crafters.com/ Software Link: http://download.code-crafters.com/ams.exe Version: 3.1.1 Tested on: Windows Server 2003 SP2 CVE : CVE-2013-6162...
Ability Mail Server 2013 (3.1.1) - Stored XSS Vulnerability
Exploit for windows platform in category remote exploits import smtplib emailaddr = 'email protected' email = 'From: %s\n' % emailaddr email += 'To: %s\n' % emailaddr email += 'Subject: XSS\n' email += 'Content-type: text/html\n\n' email += 'alert"XSS"' s = smtplib.SMTP'192.168.58.140', 25...
Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting
Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting !/usr/bin/env python ''' Exploit Title: Ability Mail Server 2013 Stored XSS Date: 12/20/2013 Exploit Author: David Um Vendor Homepage: http://www.code-crafters.com/ Software Link: http://download.code-crafters.com/ams.exe...
Ability Web Server(ftp) - Remote Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/python ==================================================== Exploit Title : Ability Web Serverftp Remote Buffer Overflow Exploit Author : JoKeRStEx Version : 2.34 \r\n" junk="A" 969 nop = "\x90" 32 eip="\x7C\x83\x69\xF0" call esp...
Assessing risk for the October 2013 security updates
Today we released eight security bulletins addressing 25 CVE’s. Four bulletins have a maximum severity rating of Critical while the other four have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment of the updates appropriately for your...
Assessing risk for the August 2013 security updates
Today we released eight security bulletins addressing 23 CVE’s. Three bulletins have a maximum severity rating of Critical while the other five have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment of the updates appropriately for your...
Ability Server 2.34 STOR Command Stack Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Ability Server 2....
Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability
Ability Mail Server is prone to a denial of service DoS vulnerability because it fails to adequately handle IMAP requests. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2009-3445
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service daemon crash via an IMAP4 FETCH command...
Command injection
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service daemon crash via an IMAP4 FETCH command...
CVE-2009-3445
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service daemon crash via an IMAP4 FETCH command...
CVE-2009-3445
CVE-2009-3445 affects Code-Crafters Ability Mail Server before 2.70. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending a malformed IMAP4 FETCH command. Multiple sources (NVD, Red Hat, OpenVAS/Nessus entries) corroborate the issue and the affected ver...
Ability Mail Server < 2.70 IMAP4 FETCH DoS
The remote host appears to be running Ability Mail Server. According to its banner, the IMAP service component of the installed version of Ability Mail Server fails to correctly parse FETCH commands. By sending a specially crafted FETCH command, an attacker may be able to exploit this vulnerabili...
Code-Crafters Ability Mail Server IMAP FETCH请求远程拒绝服务漏洞
Bugraq ID: 36519 Code-Crafters Ability Mail Server是一款Email服务程序。 Code-Crafters Ability Mail Server处理IMAP版本4 FETCH存在未明错误，远程攻击者可以利用漏洞使服务程序崩溃。 目前没有详细漏洞细节提供。 Code-Crafters Ability Mail Server 2.63 用户可联系供应商升级到Code-Crafters Ability Mail Server 2.70版本：...
CVE-2009-3445: Undefined Security Weakness
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service daemon crash via an IMAP4 FETCH command...