Cisco Email Security Appliance MIME Header Processing Filter Bypass Vulnerability

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. The vulnerability is due to improper err...

PHP '_php_imap_mail()' function integer overflow vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. An...

Views Send - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-061

The Views Send module enables you to send mail to multiple users from a View. The module doesn't sufficiently filter potential user-supplied data when previewing the e-mail which can lead to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker mus...

iOS 10.1.x Remote memory corruption through certificate file Vulnerability

Exploit for iOS platform in category remote exploits iOS 10.1.x Remote memory corruption through certificate file Credit: Maksymilian Arciemowicz from https://cxsecurity.com -------------------------------------------------------------------------------------- 0. Short description Special crafted...

Error :While Importing RSA Token from Secure Mail

When trying to import a token from Secure Mail into the RSA SecurID app that is outside of the XenMobile Secure App container, an error message is received...

Authentication Vulnerability in Coremail Mail System Server Side

Coremail mail system developed by Ying Shi Information Technology Co., Ltd. is a web application system, widely used in government agencies, enterprises and institutions and other departments. There is an authentication vulnerability in the server side of Coremail mail system. Because the server...

Edusson (Robotdon) BB - Bypass & Persistent Vulnerability

Document Title: =============== Edusson Robotdon BB - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1870 Release Date: ============= 2016-11-03 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Edusson (Robotdon) BB - Bypass & Persistent Vulnerability

Document Title: =============== Edusson Robotdon BB - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1870 Release Date: ============= 2016-11-03 Vulnerability Laboratory ID VL-ID: ==================================== 18...

[SECURITY] Fedora 24 Update: kf5-mailimporter-16.08.2-1.fc24

Mail importer library...

[SECURITY] Fedora 24 Update: kf5-mailcommon-16.08.2-1.fc24

Mail applications support library...

CVE-2016-6357

A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass a configured drop filter by using an email with a corrupted attachment. More Information:...

Authentication flaw

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all...

Cisco Web Security Appliance MIME Header Bypass Vulnerability

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions MIME headers of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass the filtering...

Cisco Email and Web Security Appliance Malformed MIME Header Vulnerability

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to...

XSS Vulnerability in NetEase Mail Master Client Android Version

NetEase Mail Master client is a universal email client launched by NetEase 163. An XSS vulnerability exists in the Android version Ver4.14.1 of the NetEase Mail Master client. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to us...

XSS Vulnerability in NetEase Email Master Client PC Version

NetEase Mail Master client is a universal email client launched by NetEase 163. An XSS vulnerability exists in the PC version Ver2.4.1.8 of the NetEase Mail Master client. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to user...

XSS Vulnerability in NetEase Mail Master Client IOS Version

NetEase Mail Master client is a universal email client launched by NetEase 163. An XSS vulnerability exists in the IOS version Ver4.14.1 of the NetEase Mail Master client. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to user...

XSS Vulnerability in NetEase Mail Client for Android

NetEase Mail Master client is a universal email client launched by NetEase 163. A cross-site scripting vulnerability exists in NetEase Mail Master Android Ver 4.13.3. It allows attackers to insert malicious js code into the page to obtain user cookies and other information, leading to user...

XSS Vulnerability in NetEase Mail Client IOS Version

NetEase Mail Client is a general-purpose email client launched by NetEase 163. An XSS vulnerability exists in the IOS version Ver3.9 of NetEase Mail Client. It allows attackers to insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...

21CN Email Client - Micro Mail Android Version XSS Vulnerability

Micro Mail is a multi-mailbox management mobile client, mobile office tools for personal and business users. XSS vulnerability exists in the Android version of 21CN Email Client - MicroMail, which allows attackers to insert malicious js code into the page to obtain user cookies and other...