Apple iOS < 10.0 Multiple Vulnerabilities

Binary data 9619.prm...

JVN#08736331: Cybozu Office vulnerable to mail header injection

Cybozu Office contains a mail header injection vulnerability in the process of sending emails. Impact If a user is tricked into sending a specially crafted request, the header of the email to be sent may be altered. As a result, unintended emails may be sent. Solution Update the Software Update t...

Guerrilla Mail - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Guerrilla Mail published at the 'play' market has multiple vulnerabilities...

BaserCMS Cross-Site Request Forgery Vulnerability

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions. When the Mail plugin is enabled and a user accesses a malicious URL, an attacker can exploit the vulnerability to perform unauthorized operations...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08863)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions. The vulnerability can be exploited by an attacker to perform unauthorized operations on the server when the Mail plugin is enabled and a user...

How to view Exchange Archive Folders within Secure Mail

Needs assistance in finding the archive folder in Secure Mail for Xenmobile...

baserCMS plugin Mail vulnerable to cross-site request forgery

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Mail contain a cross-site request forgery vulnerability. Masamu Asato of National Institute of Technology, Okinawa College reported this vulnerability to IPA. JPCERT/CC...

baserCMS plugin Mail vulnerable to cross-site request forgery

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Mail contain a cross-site request forgery vulnerability. Isao Takaesu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with t...

baserCMS plugin Mail vulnerable to cross-site scripting

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Mail contain a stored cross-site scripting vulnerability. Isao Takaesu of Mitsui Bussan Secure Directions, Inc. and Norihiko Hirukawa of FiveDrive Inc. reported this...

JVN#92765814: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugins "Blog", "Mail", "Feed", and "Uploader" contain the following vulnerabilities. Cross-site request forgery CWE-352 - CVE-2016-4879, CVE-2016-4881, CVE-2016-4884, CVE-2016-4885,...

Microsoft Exchange Sensitive Data Search: MailSniper

Microsoft Exchange Sensitive Data Search MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms passwords, insider intel, network architecture information, etc.. It can be used as a non-administrative user to search their own...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to bypass virus or spam detection systems

The vulnerability of the Microsoft Outlook email client is related to the improper implementation of the requirements specified in RFC 2046. Exploiting this vulnerability allows a malicious actor to bypass virus or spam detection systems by using specially crafted MIME data in email attachments...

Symantec Mail Security for Exchange and Domino Decomposer Engine Multiple DoS (SYM16-015)

The version of Symantec Mail Security for Exchange SMSMSE or Symantec Mail Security for Domino SMSDOM installed on the remote Windows host is affected by multiple denial of service vulnerabilities in the decomposer engine : - A denial of service vulnerability exists in the decomposer engine due t...

CVE-2016-4747

Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...

CVE-2016-4747

Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...

Design/Logic Flaw

Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...

CVE-2016-4747

Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...

CVE-2016-4747

CVE-2016-4747 refers to a vulnerability in Apple iOS Mail prior to 10, where certificate handling could allow a network attacker to perform MITM to obtain mail credentials. The issue arises from how untrusted certificates are processed in Mail, enabling credential exposure via unspecified vectors...

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07699)

Apple iOS is an operating system developed by Apple for mobile devices, and Mail is one of the mail clients. A security restriction bypass vulnerability exists in Mail in Apple iOS versions prior to 10. The vulnerability can be exploited by an attacker to bypass security restrictions, perform...

Suspicious Metadata Mail Phishing Containing Attachment

Mail attachment containing a malicious downloader was observed as part of ransomware campaigns. A remote attacker could send spam e-mails including those downloaders and convince users to manually enable them. This would allow the malicious code to run and infect the target system...