15558 matches found
CVE-2017-5942
An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail...
CVE-2017-5942
The CVE-2017-5942 entry covers a reflected XSS in the WordPress WP Mail plugin (before version 1.2). The issue arises from the replyto parameter when composing mail, enabling JavaScript execution in the recipient’s browser. Affected component: WP Mail plugin for WordPress (pre-1.2). Root cause: i...
WP Mail < 1.2 - XSS
The WP Mail WordPress plugin was affected by a XSS security vulnerability...
WordPress plugin WP Mail <=1.1 - Reflected Cross Site Scripting (XSS) vulnerability
WordPress plugin WP Mail version 1.1 has Reflected Cross Site Scripting XSS vulnerability and allows an attacker to execute JavaScript in the context of the user receiving the mail. Solution Update plugin to the latest version at least 1.2...
Automated Job Portal Script - SQL Injection
Exploit Title: Automated Job Portal Script - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.jagaad.com/ Software Buy: https://codecanyon.net/item/automated-job-portal-script/14318664 Demo: http://www.jagaad.com/demo/php/automated-job-portal/ Version: N/A Tested on: Wi...
Youtube Analytics Multi Channel 3.0 SQL Injection
Exploit Title: Youtube Analytics Multi Channel v3.0 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://vtcreators.com/ Software Buy: https://codecanyon.net/item/youtube-analytics-multi-channel/14720919 Demo: http://demo.vtcreators.com/yamc/ Version: 3.0 Tested on: Win7 x64,...
Google Android AOSP Mail Information Disclosure Vulnerability (CNVD-2017-01556)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android AOSP Mail. Attackers use this vulnerability to obtain sensitive information and launch further attacks...
SA141 : OpenSSL Vulnerabilities 26-Jan-2017
SUMMARY Symantec Network Protection products using affected versions of OpenSSL are susceptible to several vulnerabilities. A remote attacker can exploit these vulnerabilities to cause denial of service and obtain private key information. AFFECTED PRODUCTS The following products are vulnerable:...
CVE-2017-0420
An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not...
CVE-2017-0420
An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not...
Information disclosure
An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not...
CVE-2017-0420
An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not...
UBUNTU-CVE-2017-0420
An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not...
CVE-2017-0420
CVE-2017-0420 is an information-disclosure vulnerability in AOSP Mail. A local malicious app could bypass OS protections that isolate app data, potentially accessing data from other apps. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The connected sources conf...
CVE-2017-0420
An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not...
Service Desk mail handler create comments in other JIRA issues if subject have valid issues keys
h3. Summary Service Desk mail handler create comments in other JIRA issues if email subject have valid issues keys of issues from other JIRA Projects. h3. Environment Cloud h3. Steps to Reproduce Create a SD project Setup the mail handler Create another project and create an issue on it. Send an...
SUPEE-9652 - Remote Code Execution using mail vulnerability
More info at https://magento.com/security/patches/supee-9652...
SUPEE-9652 - Remote Code Execution using mail vulnerability
More info at https://magento.com/security/patches/supee-9652...
Telmex Infinitum Mail - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Telmex Infinitum Mail published at the 'play' market has multiple vulnerabilities...
