Design/Logic Flaw

The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to bypass intended access restrictions and conduct e-mail communication by leveraging knowledge of a child's e-mail address...

Mandriva Linux Security Advisory : dovecot (MDVSA-2010:196)

A vulnerability was discovered and corrected in dovecot : Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary...

Unfixed XSS vulnerability at www.where-what.com

Security researcher roboteto, has submitted on 10/03/2010 a cross-site-scripting XSS vulnerability affecting www.where-what.com, which at the time of submission ranked 1487935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Lotus Domino nrouter.exe iCalendar MAILTO buffer overflow

Added: 09/24/2010 CVE: CVE-2010-3407 BID: 43219 OSVDB: 68040 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow in the nrouter.exe service allows remote attackers to execute arbitrary commands by sending an iCalendar message...

Unfixed XSS vulnerability at www.seochat.com

Security researcher NanoyMaster, has submitted on 23/09/2010 a cross-site-scripting XSS vulnerability affecting www.seochat.com, which at the time of submission ranked 3315 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

Open redirect

Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service CPU consumption via a large message, a different vulnerability than...

Stack overflow

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in...

Heap overflow

Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."...

Unfixed XSS vulnerability at phome.net

Security researcher Wong Chieh Yie, has submitted on 09/11/2010 a cross-site-scripting XSS vulnerability affecting phome.net, which at the time of submission ranked 6559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

Unfixed Redirect vulnerability at phome.net

Security researcher Wong Chieh Yie, has submitted on 09/11/2010 a Redirect vulnerability affecting phome.net, which at the time of submission ranked 6559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed. If yo...

Unfixed XSS vulnerability at webint.oi.net.br

Security researcher Brenn0, has submitted on 09/08/2010 a cross-site-scripting XSS vulnerability affecting webint.oi.net.br, which at the time of submission ranked 87414 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011. It is currentl...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

Job Portal Multiple Vulnerabilities

Exploit for php platform in category web applications =================================== Job Portal Multiple Vulnerabilities =================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Microsoft Security Bulletin MS10-056 - Critical Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (2269638)

Microsoft Security Bulletin MS10-056 - Critical Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution 2269638 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves four privately reported vulnerabilities in Microsoft Offic...

Unfixed XSS vulnerability at www.hdnl.co.uk

Security researcher Ben Holmes, has submitted on 08/04/2010 a cross-site-scripting XSS vulnerability affecting www.hdnl.co.uk, which at the time of submission ranked 93362 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Unfixed XSS vulnerability at thevault.stridegum.com

Security researcher Luis Santana, has submitted on 08/04/2010 a cross-site-scripting XSS vulnerability affecting thevault.stridegum.com, which at the time of submission ranked 279882 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. I...

CVE-2009-4959

SQL injection vulnerability in the T3M E-Mail Marketing Tool t3m extension 0.2.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the T3M E-Mail Marketing Tool t3m extension 0.2.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Unfixed XSS vulnerability at www.biomedcentral.com

Security researcher nullbyt3, has submitted on 28/07/2010 a cross-site-scripting XSS vulnerability affecting www.biomedcentral.com, which at the time of submission ranked 24891 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...