202 matches found
EUVD-2018-1031
Malware in sbrugna...
EUVD-2018-7326
Malware in sbrugna...
EUVD-2018-1190
Malware in sbrugna...
EUVD-2017-3865
Malware in sbrugna...
EUVD-2017-4035
Malware in sbrugna...
EUVD-2017-13006
Malware in sbrugna...
EUVD-2017-3864
Malware in sbrugna...
Exploit for Argument Injection in Phpmailer_Project Phpmailer
PHPMailer And that's it, you have your shell. There is another exploit, which ilustrates another use case. ./deface.sh localhost:8080 + CVE-2016-10033 exploit by opsxcq + Exploiting localhost:8080 + Target exploited, acessing shell at http://localhost:8080/backdoor.php + Checking if the backdoor...
CVE-2025-24904 libsignal-service-rs doesn't sanity check plaintext envelopes are not sanity-checked
libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, plaintext content envelopes could be injected by a server or a malicious client, and m...
libsignal-service-rs 注入漏洞
libsignal-service-rs is a libsignal service open-sourced by Whisperfish for communicating with Signal servers. An injection vulnerability exists in libsignal-service-rs that stems from not properly validating the encryption state of the content envelope, allowing for plaintext injection...
Malicious code in dmn-editor-envelope (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cea2a6739abd5713f936e329c35aab9e44e6296aa0998b622c48217a3c1fbd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8916 Malicious code in dmn-editor-envelope (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cea2a6739abd5713f936e329c35aab9e44e6296aa0998b622c48217a3c1fbd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-28063
Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...
PT-2024-14283 · Apache · Apache James
Name of the Vulnerable Software and Affected Versions: Apache James versions prior to 3.8.1 and 3.7.5 Description: A lenient behavior in line delimiter handling might create a difference of interpretation between the sender and the receiver, which can be exploited by an attacker to forge an SMTP...
CVE-2023-40711
Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...
PT-2023-27609 · Veilid · Veilid
Name of the Vulnerable Software and Affected Versions: Veilid versions prior to 0.1.9 Description: The issue allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data. This is due to the lack of size checking for uncompressed data during decompression upon a...
VulnCheck KEV: CVE-2023-40711
Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data, as exploited in the wild in August 2023...
SUSE CVE-2006-3668
Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...
SUSE CVE-2008-4907
The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...