Coremail - Config Discovery Detection

Coremail configuration information was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Coremail configuration information was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Coremail - Config...

Coremail: undisclosed vulnerability (ZAI-2026-UN4YNC)

Not disclosed. Details are not yet publicly disclosed...

Coremail: undisclosed vulnerability (ZAI-2026-E9GT6L)

Not disclosed. Details are not yet publicly disclosed...

EUVD-2015-6874

Malware in sbrugna...

EUVD-2018-20924

Malware in sbrugna...

EUVD-2020-21514

Malware in sbrugna...

EUVD-2018-6419

Malware in sbrugna...

CVE-2020-29133

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

PT-2025-13579

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 5.6.3.154.205 Coremail Mail Server affected versions not specified Description A critical issue has been identified, allowing for SQL injection through the manipulation of the typename argument in an unknown function of th...

Coremail XT <= 5.0 XSS Vulnerability

Coremail XT is prone to a cross-site scripting XSS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-29133

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

CVE-2020-29133

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

Cross site scripting

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

CVE-2020-29133

CVE-2020-29133 : Concrete details found in connected documents indicate a cross-site scripting (XSS) vulnerability in Coremail XT 5.0, triggered via jsp/upload.jsp in the signImgFile parameter when uploading a personal signature (demonstrated by a .jpg.html filename). Affected software/component:...

CVE-2020-29133

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

PT-2020-17094

Name of the Vulnerable Software and Affected Versions Coremail XT version 5.0 Description The issue allows for XSS via an uploaded personal signature. This is demonstrated by a .jpg.html filename in the signImgFile parameter. Recommendations For Coremail XT version 5.0, consider restricting the...

CVE-2020-29133: Improper Neutralization of Input During Web Page Generation

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

Coremail XT Cross-Site Scripting Vulnerability

Coremail XT is a set of enterprise-class mail system from China Yingshi Computer Technology Company. The system supports sending and receiving emails, enterprise address book, enterprise cloud disk and schedule synchronization. A cross-site scripting vulnerability exists in jsp/upload.jsp in...

Coremail XT Cross-Site Scripting Vulnerability

Coremail XT is a set of enterprise-class mail system from China Yingshi Computer Technology Company. The system supports sending and receiving emails, enterprise address book, enterprise cloud disk and schedule synchronization. A cross-site scripting vulnerability exists in jsp/upload.jsp in...

Remote Command Execution Vulnerability in Coremail Argumenter Client

Coremail client Mailbox For Windows is a mail client of coremail, which fully supports the synchronization of Coremail account data and has a better application experience. A remote command execution vulnerability exists in Coremail Lobbyist Client. An attacker can exploit the vulnerability to...