Debian DSA-2242-1 : cyrus-imapd-2.2 - implementation error

It was discovered that the STARTTLS implementation of the Cyrus IMAP server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted IMAP, LMTP, NNTP and POP3 sessions by sending a cleartext command that is processed after TLS is in plac...

WinSCP < 3.8.2 Arbitrary Command Insertion

Binary data 3648.prm...

Command execution in perl-MailTools

Usage of mailx as a mailer allows command insertion into mail body...

Cisco SSH multiple bugs

It's possible to insert command and intercept data from ssh session...