18469 matches found
PT-2023-27830 · Usermin +1 · Usermin +1
Name of the Vulnerable Software and Affected Versions: Webmin and Usermin version 2.000 Description: A Stored Cross-Site Scripting XSS issue exists in the mail forwarding and replies tab, allowing remote attackers to inject arbitrary web script or HTML via the forward to field while creating a ma...
Usermin Cross-Site Scripting Vulnerability
Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A cross-site scripting vulnerability exists in Usermin version 2.000, which originates from a stored cross-site scripting XSS vulnerability in the Mail Forwarding a...
CVE-2023-41155
A Stored Cross-Site Scripting XSS vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule...
CVE-2023-40440
This issue was addressed with improved state management of S/MIME encrypted emails. This issue is fixed in macOS Monterey 12.6.8. A S/MIME encrypted email may be inadvertently sent unencrypted...
Mutt Pointer Aliasing DoS
The vulnerability of the Mutt mail client is related to errors in pointer manipulation when processing message headers. Exploiting this vulnerability can allow an attacker to cause a service failure...
Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS Vulnerability
Exploit Title: Axigen if xhr1.readyState === XMLHttpRequest.DONE hcookie = new URLxhr1.responseURL.search.split"="1; xhr2.open'PATCH', /api/v1/conversations/MQ/?h=$hcookie, true; xhr2.setRequestHeader'Content-Type', 'application/json';...
[SECURITY] Fedora 37 Update: clamav-0.103.10-1.fc37
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...
Socomec MODULYS GP Cross-Site Scripting Vulnerability
The Socomec MODULYS GP is a green power device from Socomec France. The Socomec MODULYS GP suffers from a cross-site scripting vulnerability that originates from the ability to inject stored cross-site scripting code via the MAILRCV field...
PT-2023-5296 · Unknown · Mod3Gp-Sy-120K
Name of the Vulnerable Software and Affected Versions: MOD3GP-SY-120K affected versions not specified Description: The web application of MOD3GP-SY-120K contains a persistent cross-site scripting XSS issue. This allows an authenticated remote attacker to inject an XSS payload into the MAIL RCV...
PT-2023-5300 · Unknown · Modulys Gp
Name of the Vulnerable Software and Affected Versions: MODULYS GP MOD3GP-SY-120K affected versions not specified Description: The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be...
Mail.MailConfig Component XWiki Platform Config Modification
The vulnerability of the Mail.MailConfig component in the XWiki platform, a tool for creating collaborative web applications, stems from insecure management of privileges. Exploiting this vulnerability allows an attacker to remotely modify email sending configurations...
Multiple vulnerabilities in CGIs of PMailServer and PMailServer2
Overview CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2023-39223 Insufficient verification vulnerability in Broadcast Mail CGI pmc.exe CWE-434 - CVE-2023-39933...
(RHSA-2023:4953) Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.0. Security Fixes: For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the...
Store XSS in Mail Setup
Description I noticed, your website is very secure. But you overlooked a flaw XSS . Proof of Concept Detail: 1 .Login vs admin demo account and access admin page. 2 .Go to Configuration == Mail setup. 3 .Insert payload into Password: test"alertdocument.domain 4 .Click save configuration == detect...
Airflow SMTP Provider IMAP Provider Unauthorized Access
The vulnerabilities of the Airflow SMTP Provider and Airflow IMAP Provider, which are software components for creating, monitoring, and orchestrating data processing scenarios, are related to errors in the certificate validation process. Exploiting these vulnerabilities can allow an attacker to...
[SECURITY] Fedora 37 Update: clamav-0.103.9-1.fc37
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...
Secure Mail - Unable to sync emails - Log Error: Caught ParserException in with Sync
Emails do not sync. Reinstalling Secure Mail does not resolve the issue. Secure Mail logs show: " 2019-07-16T10:40:23.024-0700 ",SecureMail,ERROR 2,-ActiveSyncEngine postSynchronousCommandWithData:contentType:withParser:withCommandString:withTimeout:error:,"Caught ParserException in with...
Improper Certificate Validation
apacheairflow is vulnerable to Improper Certificate Validation. The software does not properly validate SMTP certificates, which could allow an attacker to present a malicious certificate to the client which could be used to impersonate a legitimate mail server, allowing the attacker to steal mai...
CVE-2023-39699
IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...
