CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-1105

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

PT-2011-2870

Name of the Vulnerable Software and Affected Versions Mutare EVM affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML, potentially via a delivery addres...

CVE-2011-1105: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

Microsoft SQL Server - Payload Execution (via SQL Injection) (Metasploit)

$Id: mssqlpayloadsqli.rb 11730 2011-02-08 23:31:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Code injection

The deliver function in the sendmail delivery agent lib/mail/network/deliverymethods/sendmail.rb in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address...

CVE-2011-0739

The deliver function in the sendmail delivery agent lib/mail/network/deliverymethods/sendmail.rb in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address...

CVE-2011-0739

CVE-2011-0739 affects the Ruby Mail gem (2.2.14 and earlier). The root cause is the deliver() path in the sendmail delivery method (lib/mail/network/delivery_methods/sendmail.rb), where shell metacharacters in an e-mail address can be injected to execute arbitrary commands. Public references conf...

PT-2011-2600

Name of the Vulnerable Software and Affected Versions Ruby Mail gem versions 2.2.14 and earlier Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address. This is due to a problem in the deliver function in the sendmail delivery agen...

Hackers will not be deterred by UK cyber defences !

Military "cyber weaponry" will become commonplace this century, but it will be unlikely to deter attacks by "hacktivists" and criminal gangs, and could easily be used for state-sponsored cyber attacks instead, the Organisation for Economic Co-operation and Development warns. The British authors o...

Microsoft SQL Server - Payload Execution (Metasploit)

$Id: mssqlpayload.rb 11392 2010-12-21 20:36:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Maildrop: privilege escalation

Background maildrop is the mail filter/mail delivery agent that is used by the Courier Mail Server. Description Christoph Anton Mitterer reported that maildrop does not properly drop its privileges when run as root. Impact A local attacker could create a specially crafted .mailfilter file, possib...

CVE-2010-1577

The CVE-2010-1577 vulnerability affects Cisco Content Delivery System CDS Internet Streamer (Cisco CDS) Web Server in CDS 2.2.x, 2.3.x, 2.4.x, and 2.5.x prior to 2.5.7. It is a directory traversal flaw that allows an unauthenticated, remote attacker to read arbitrary files via a specially crafted...

CVE-2010-1577: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System CDS 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL...

Automatic Drive-by Download

Added: 07/23/2010 Background This tool waits for client connections, and then gathers information about the operating system and installed software on the client. Next, it chooses the latest and most reliable client exploit for the client's operating system and installed software, and delivers th...

Cisco Plugs Code Execution Hole in CDS Internet Streamer

Cisco has shipped a critical bulletin to warn about a serious security hole in the Cisco Internet Streamer application, which is part of the Cisco Content Delivery System. In an advisory, Cisco warned that exploitation of this vulnerability may allow a remote, unauthenticated attacker to obtain...

Exim < 4.72 Multiple Vulnerabilities

The remote host is running Exim, a message transfer agent SMTP. According to the version number in its banner, the installed version of Exim is earlier than 4.72 and thus potentially affected by one or both of the following vulnerabilities : - An error when handling hardlinks within the mail...

Exim < 4.72 Multiple Vulnerabilities

Binary data 5557.prm...

Multiple vulnerabilities in Deliver

================================== Deliver, multiple vulnerabilites March 24, 2010 CVE-2010-0439 ================================== ==Description== Deliver http://deliver.sourceforge.net/, a mail delivery program installed suid root as /usr/bin/deliver, is vulnerable to several race conditions...

Search Ads Distributing Malware

Malware that exploits holes in popular applications is being delivered by big ad delivery platforms including those run by Yahoo, Fox, and Google, according to researchers. Read the full article. CNet...