ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in ASUS BMC's firmware Web management page, which originates from a buffer overflow vulnerability due to the SMTP configuration function not validating the length of a user-entered string. A remote...

BMC Control-M/Agent Buffer Overflow Vulnerability

Control-M is one of BMC's most important automation control products, and is the world's leading integrated business scheduling solution for cross-platform and cross-application job scheduling. A buffer overflow vulnerability exists in BMC Control-M/Agent when the On-Do action destination is Mail...

CVE-2017-18466

cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration SEC-228...

CVE-2017-18466

cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration SEC-228...

Code injection

cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration SEC-228...

CVE-2017-18466

CVE-2017-18466 affects cPanel prior to 62.0.17. The issue is that the system does not properly recognize domain ownership when adding parked domains to a mail configuration (SEC-228). Affected product/version: cPanel before 62.0.17. Description across connected sources reiterates the same vulnera...

CVE-2017-18466

cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration SEC-228...

PT-2019-8401

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue arises from improper recognition of domain ownership when adding parked domains to a mail configuration. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later t...

CVE-2017-18466: Improper Input Validation

cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration SEC-228...

OrangeHRM Arbitrary Command Injection Vulnerability

OrangeHRM is a human resource management system HRM from OrangeHRM, Inc. in the United States. The system supports personnel information management, leave management, attendance management and recruitment management. A command injection vulnerability exists in admin/listMailConfiguration in...

IPFire 2.21 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: IPFire 2.21 - Core Update 127 | Cross-Site Scripting Exploit Author: Ozer Goker Vendor Homepage: https://www.ipfire.org Software Link:...

PT-2018-9008

Name of the Vulnerable Software and Affected Versions Denbun by NEOJAPAN Inc. versions V3.3P R4.0 and earlier Denbun by NEOJAPAN Inc. versions V3.3I R4.0 and earlier Description The issue allows remote attackers to potentially read or send mail, or change the configuration due to the use of...

How to attach files in Secure Mail keeping the policy restricted

In Secure Mail/WorxMail versions 10.3.5 and later, Android users can't attach images directly from the Gallery app when the Inbound document exchange Open-in policy is set to Restricted. If you want to keep this policy set to Restricted but still allow users to add photos from the Gallery, follow...

XSS in Mail Whitelist Field

Jira Admins can create a persistant XSS on the Incoming Mail configuration page. When the value code "alert1 code is inserted into the Witelisted Domain field on the page code /secure/admin/IncomingMailServers.jspa code The javascript persists and executes on page load. This was tested on Jira...

Sinapsi eSolar Light Plaintext Password Disclosure Vulnerability

Sinapsi eSolar Light is a monitoring system for use within solar applications from the Italian company Sinapsi. A security vulnerability in Sinapsi eSolar Light allows a remote attacker to read the HTML source code in the mail-configuration page to obtain a clear-text password and use it for...

CVE-2015-3949

Sinapsi eSolar Light with firmware before 2.0.3970schsl2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page...

Code injection

Sinapsi eSolar Light with firmware before 2.0.3970schsl2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page...

CVE-2015-3949

Sinapsi eSolar Light with firmware before 2.0.3970schsl2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page...

PT-2015-6354

Name of the Vulnerable Software and Affected Versions Sinapsi eSolar Light versions prior to 2.0.3970 schsl 2.2.85 Description The issue allows attackers to discover cleartext passwords by reading the HTML source code of the "mail-configuration" page. Recommendations For versions prior to 2.0.397...

CVE-2015-3949: Exposure of Sensitive Information to an Unauthorized Actor

Sinapsi eSolar Light with firmware before 2.0.3970schsl2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page...