Coremail XT Cross-Site Scripting Vulnerability

Coremail XT is a set of enterprise-class mail system from China Yingshi Computer Technology Company. The system supports sending and receiving emails, enterprise address book, enterprise cloud disk and schedule synchronization. A cross-site scripting vulnerability exists in jsp/upload.jsp in...

CyberMail Open Redirect Vulnerability

CyberMail is an e-mail system from CyberSolutions Japan. CyberMail suffers from an open redirection vulnerability. No detailed vulnerability details are available at this time...

Cross-site Scripting Vulnerability in Crypto Email System

Crypto Email System is an enterprise-level email system. A cross-site scripting vulnerability exists in Crypto Email System. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Command Execution Vulnerability in Goldie's Mail System

Kindie mail system is an e-mail server developed for the communication needs of enterprises and institutions, the software system kernel is developed in C++, with strong stability and security. A command execution vulnerability exists in the Goldpac Email System, which can be exploited by an...

Coremail Discusses Information Disclosure Vulnerability in Guest Email System

Coremail mail system is the mail system with the most mailbox users in China. There is an information leakage vulnerability in Coremail mail system, which can be exploited by attackers to obtain sensitive information...

Cross-Site Scripting Vulnerability in eYou Email System

eYou email system is a mail system software with independent intellectual property rights, which is independently researched and developed by EYou. As a mail system software and overall solution provider in China, EYou email system provides a professional technology platform and complete network...

xml Entity Injection Vulnerability in Merak Email System

Merak Mail System is a secure, stable, easy-to-use mail server software and a high-performance mail management system for Windows and Linux platforms. A xml entity injection vulnerability exists in Merak Email System, which can be exploited by attackers to obtain sensitive information...

DocuSign Data Breach Led to Targeted Email Malware Campaign

While we all were busy in the WannaCry ransomware menace, two separate data breaches have been reported, one in DocuSign, a major provider of electronic signature technology, and another in BELL, Canada’s largest telecommunications company. In a notice on its website on Tuesday, DocuSign confirme...

TodayMail email system/webmail/tools/cardList. php file sort_by parameter SQL injection vulnerability

No description provided by source...

Let's Encrypt Accidentally Spills 7,600 User Emails

Certificate authority Let’s Encrypt accidentally disclosed the email addresses of several thousand of its users this weekend. Josh Aas, Executive Director for the Internet Security Research Group ISRG, the nonprofit group that helped launch the CA, apologized for the error on Saturday. In what...

University Pays Hackers $20,000 to get back its Ransomware Infected Files

What's the worst that could happen when a Ransomware malware hits University? Last month, the IT department of the University from where I have done my graduation called me for helping them get rid of a Ransomware infection that locked down all its student's results just a day before the...

iGENUS 邮件系统 V5.0 任意文件读取漏洞

login.php 文件中，选择语言环境后会读取语言文件，并加载到页面，后台接到请求后，没有对 Lang 参数过滤，就直接读取文件，从而造成任意文件读取漏洞。 http://221.130.182.230/igenus/login.php?Lang=../../../../../../../../../../etc/passwd%00.jpg...

Multiple Igreks MilkyStep Product Security Bypass Vulnerabilities

Igreks MilkyStep is a CGI for pushing magazines through the email system. A security bypass vulnerability exists in multiple Igreks MilkyStep products, which allows remote attackers to bypass security restrictions and perform unauthorized operations...

eyou某服务器OPENSSL漏洞(影响大量网站邮箱系统)

简要描述： 详细说明： 118.194.236.38 Connecting... Sending Client Hello... Waiting for Server Hello... ... received message: type = 22, ver = 0302, length = 66 ... received message: type = 22, ver = 0302, length = 770 ... received message: type = 22, ver = 0302, length = 203 ... received message: type = 22...

Arbitrary File Upload Vulnerability in Youyou Email System of Shenzhen Hechen Communication Technology Co.

Shenzhen Hechen Communication Technology Co., Ltd. Youyou mail system is a modern enterprise to set up a professional e-mail service of a set of overall solutions, the mail system not only provides the conventional e-mail functions, but also extends the e-mail monitoring, e-mail antivirus, e-mail...

Arbitrary User Password Change Vulnerability in AnyMacro Email System Used by Multiple Organizations

AnyMacro is a professional product and solution provider in the field of email and unified messaging. A security vulnerability exists in the AnyMacro email system due to the failure of the user password recovery function to properly verify user passwords. This vulnerability allows an attacker to...

eYou邮件系统邮件正文存储型XSS2(内附eYouXSS影响证明)

简要描述： 新玩意儿，影响Chrome。 在测试这个XSS过程中发现一处很严重的HttpOnly COOKIE泄漏，导致邮件正文型XSS能够获取用户全部COOKIE从而进行登陆。 详细说明： 新玩意儿，影响Chrome。 在测试这个XSS过程中发现一处很严重的HttpOnly COOKIE泄漏，导致邮件正文型XSS能够获取用户全部COOKIE从而进行登陆。内有POC （wooyun上有一些关于eyou邮件正文型XSS的报告，你们给的回应全都是“已有解决方案”、“问题已知，谢谢报告”。然而测试了几所大学的邮件系统，全都没修复，感觉你们是在逗我.....） 漏洞证明：...

eYou邮件系统邮件正文存储型XSS

简要描述： 找到一个可绕过的存储型XSS方法 详细说明： 依据北京理工大学eYou邮件系统测试， http://wooyun.org/bugs/wooyun-2010-066645 这个帖子中的XSS向量已经全部无效。 经过测试，依然有可以绕过的XSS脚本 漏洞证明： 1.一个按钮 tte 2.直接 prompt1te 提交 弹窗...

漫游用友集团各大系统

简要描述： 漫游用友集团各大系统 详细说明： 在一个月黑风高的夜晚，用友某员工的集团办公平台账号，悄悄地泄露了。 // Send message Transport transport=session.getTransport; transport.connect"192.168.210.160" , 25, "ch2","1r"; transport.sendMessagemessage,new Addressnew InternetAddress"[email protected]" ; transport.close;...

U-Mail Mail Service system arbitrary file upload+execution vulnerabilities runtime defects and authentication bypass）-bug warning-the black bar safety net

Brief description: PRODUCT DESCRIPTIONtaken from website U-Mail focus on email field 1 to 5 years, for enterprises to easily build the most secure and stable e-mail system software. Keywords: 1 5 years the safest most stable 1 5 year the safest and most stable , woxaole,so wonderful code, so...