Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action has multiple reflected cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action script processing attachment-macro has a cross-site scripting vulnerability that can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it...

Threat Outbreak Alert RuleID14594: Email Messages Distributing Malicious Software on April 10, 2015

Medium Alert ID: 38336 First Published: 2015 April 13 12:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14594 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID13950: Email Messages Distributing Malicious Software on March 11, 2015

Medium Alert ID: 37831 First Published: 2015 March 11 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13950 may contain the following files: Name | Si...

Arbitrary File Upload Vulnerability in Youyou Email System of Shenzhen Hechen Communication Technology Co.

Shenzhen Hechen Communication Technology Co., Ltd. Youyou mail system is a modern enterprise to set up a professional e-mail service of a set of overall solutions, the mail system not only provides the conventional e-mail functions, but also extends the e-mail monitoring, e-mail antivirus, e-mail...

AL-Mail32 Attachment Name Directory Traversal Vulnerability

AL-Mail32 is an email client. AL-Mail32 suffers from a directory traversal vulnerability in the handling of attachment filenames, which allows an attacker to create arbitrary files or overwrite existing files...

AL-Mail32 Attachment Name Denial of Service Vulnerability

AL-Mail32 is an email client. A security vulnerability in AL-Mail32's handling of attachment filenames allows attackers to exploit the vulnerability to crash the application...

AL-Mail32 Attachment Name Buffer Overflow Vulnerability

AL-Mail32 is an email client. AL-Mail32 suffers from a buffer overflow vulnerability in the handling of attachment filenames, which could be exploited by an attacker to crash the application or execute arbitrary code...

To bypass youdao cloud notes read password-vulnerability warning-the black bar safety net

My is youdao cloud notes fans, today nothing else to test it Notes a function is a private notebook and read when you need to input to read the password, then we can put the important things into going to be confidential. When you click on the other laptop when a read password of the notebook wil...

CVE-2015-0880

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment...

CVE-2015-0878

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment...

Buffer overflow

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment...

CVE-2015-0879

CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service application crash via a 1 CON, 2 AUX, or 3 NUL device name in the filename of an attachment...

CVE-2015-0878

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment...

CVE-2015-0880

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment...

AL-Mail32 vulnerable to buffer overflow

Overview AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a buffer overflow vulnerability due to a flaw in processing attachments. Impact When an attachment with specially crafted file name is processed, arbitrary code may be executed. Solution Update the...

AL-Mail32 vulnerable to denial-of-service (DoS)

Overview AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a denial-of-service DoS vulnerability due to a flaw in processing attachments. Yosuka HASEGAWA of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer unde...

AL-Mail32 vulnerable to directory traversal

Overview AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a directory traversal vulnerability due to a flaw in processing attachments. Yosuka HASEGAWA of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#77294617: AL-Mail32 vulnerable to directory traversal

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a directory traversal vulnerability due to a flaw in processing attachments. Impact Processing an attachment with a specially crafted file name may result in creation of an arbitrary file or an overwrite of...

JVN#55365709: AL-Mail32 vulnerable to denial-of-service (DoS)

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a denial-of-service DoS vulnerability due to a flaw in processing attachments. Impact Processing an attachment with a specially crafted file name may cause the software to become unresponsive. Solution Upda...

Threat Outbreak Alert RuleID13457: Email Messages Distributing Malicious Software on February 6, 2015

Medium Alert ID: 37385 First Published: 2015 February 9 14:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13457 may contain the following files: Name |...