6722 matches found
Unable to send emails with attachment with error "Can't Send Mail. Your message has been moved to the outbox..."
Users are unable to attach files to their emails. It fails with the following error: Error: "Can't Send Mail. Your message has been moved to the outbox. Please go to the outbox and try again."...
CVE-2017-5223
An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base...
Threat Outbreak Alert RuleID27117: Email Messages Distributing Malicious Software on January 9, 2017
Medium Alert ID: 52275 First Published: 2017 January 9 16:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27117 may contain the following files: Name |...
Suspicious Microsoft Office File Archive Mail Attachment
Many campaigns are known to use mail attachments containing double zipped files. A remote attacker could send e-mails including such files and convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system...
Open-Xchange: IDOR - Downloading all attachements if having access to a shared link
Hello, I have found that one can download all attachements if finds/has access to a public link in this POC a shared task link. This is a big issue as one can download all the attachements of registered users, while the attacker is not actually logged in the application ! Also, I have found anoth...
Fedora 24 : roundcubemail (2016-60753c3dcd)
Version 1.2.3 - Searching in both contacts and groups when LDAP addressbook with groupfilters option is used - Fix vulnerability in handling of mail's 5th argument - Fix To: header encoding in mail sent with mail method 5475 - Fix flickering of header topline in min-mode 5426 - Fix bug where...
Fedora 23 : roundcubemail (2016-b4896f20b3)
Version 1.2.3 - Searching in both contacts and groups when LDAP addressbook with groupfilters option is used - Fix vulnerability in handling of mail's 5th argument - Fix To: header encoding in mail sent with mail method 5475 - Fix flickering of header topline in min-mode 5426 - Fix bug where...
Cisco Email Security Appliance Content Filter Bypass Vulnerability
A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass user filters that are configured for an affected device. The vulnerability is due to improper filtering of certain TAR...
Cisco AsyncOS for Email Security Appliances MIME Header Processing Filter Bypass (cisco-sa-20161116-esa1 / cisco-sa-20161116-esa2)
According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by an email filter bypass vulnerability in the email filtering functionality due to improper error handling when processing malformed Multipurpose Internet Mail Extension...
HackerOne: Internal attachments can be exported via "Export as .zip" feature
Hello HackerOne Team This newly disclosed report: 182358 Partial disclosure of report activity through new "Export as .zip" feature was not completely fix. I have found that i can still view the attachment after it is being removed on the thread. Best PoC is this 182358 since this is the newly fi...
Spear Phishing Helper: Hemingway
Spear Phishing Helper This tool was built to allow simpler campaigns of phishing. It does not try to resolve issues with SMTP relaying or reputation but rather to allow a penetration tester or red team member to create a phishing campaign with a ready made server for the phishing. We also assume...
CVE-2016-6458
A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass content filters configured on an affected device. Email that should have been filtered could instead be forwarded by the...
CVE-2016-6458
A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass content filters configured on an affected device. Email that should have been filtered could instead be forwarded by the...
openSUSE Security Update : otrs (openSUSE-2016-1316)
This update for otrs fixes the following security issues : - CVE-2016-9139: execution of JavaScript in OTRS context by opening malicious attachment OSA-2016-02, bsc1008017 In addition, OTRS was updated to 3.3.16, containing all upstream improvements and bug fixes. %NASLMINLEVEL 70300 C Tenable...
Cisco Email Security Appliance MIME Header Processing Filter Bypass Vulnerability
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. The vulnerability is due to improper err...
Cisco Email Security Appliance MIME Header Processing Filter Bypass Vulnerability
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. The vulnerability is due to improper err...
Debian DSA-3715-1 : moin - security update
Several cross-site scripting vulnerabilities were discovered in moin, a Python clone of WikiWiki. A remote attacker can conduct cross-site scripting attacks via the GUI editor's attachment dialogue CVE-2016-7146 , the AttachFile view CVE-2016-7148 and the GUI editor's link dialogue CVE-2016-9119...
Fake fax ushers in revival of a ransomware family
Note: Read our latest comprehensive report on ransomware: Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene. "Criminal case against you" is a message that may understandably cause panic. That’s what a recent spam campaign hopes happens, increasing the likelihood ...
Fedora 25 : php-horde-Horde-Core (2016-866713edaf)
HordeCore 2.26.1 - jan SECURITY: Add CSRF protection tokens to portal layout forms and fix open URL redirection Reported by Florian Kllich. - jan SECURITY: enable CSRF token for configuration form again Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program. - mjr...