PT-2017-14986

Name of the Vulnerable Software and Affected Versions Ability Mail Server versions prior to 4.2.4 Description The issue allows for Cross Site Scripting XSS via the body of an e-mail message. This occurs when JavaScript code is executed on the Read Mail screen, accessible through the / readmail UR...

Ability Mail Server 3.3.2 - Cross-Site Scripting

Exploit Title: Ability Mail Server 3.3.2 Persistent Cross Site Scripting XSS CVE: CVE-2017-17752 Date: 19-12-2017 Software Link: http://download.codecrafters.com/ams3.exe Exploit Author: Aloyce J. Makalanga Contact: https://twitter.com/aloycemjr Vendor Homepage: http://www.codecrafters.com...

CVE-2017-17752: Improper Neutralization of Input During Web Page Generation

Ability Mail Server 3.3.2 has Cross Site Scripting XSS via the body of an e-mail message, with JavaScript code executed on the Read Mail screen aka the /readmail URI. This is fixed in version 4.2.4...

ArGoSoft Mini Mail Server Denial of Service Vulnerability

ArGoSoft Mini Mail Server is a full-featured mail server for Windows platform that supports POP3/SMTP/FINGER protocols. A denial of service vulnerability exists in ArGoSoft Mini Mail Server 1.0.0.2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service...

Denial of service

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

CVE-2017-15223

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

CVE-2017-15223

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

CVE-2017-15223

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

CVE-2017-15223

The CVE-2017-15223 entry applies to ArGoSoft Mini Mail Server 1.0.0.2 and earlier, describing a remote denial-of-service that wastes CPU/memory resources via unspecified vectors, potentially triggering an infinite loop. Connected sources corroborate a DoS vulnerability in this software and note p...

CVE-2017-15223: Loop with Unreachable Exit Condition

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

PT-2017-13919

Name of the Vulnerable Software and Affected Versions ArGoSoft Mini Mail Server versions 1.0.0.2 and earlier Description A denial-of-service issue allows remote attackers to consume CPU resources, possibly due to an infinite loop, via unspecified vectors. Recommendations For versions 1.0.0.2 and...

Cross site scripting

Cross-site scripting XSS vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment...

CVE-2015-5379

Cross-site scripting XSS vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment...

CVE-2015-5379

Cross-site scripting XSS vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment...

CVE-2015-5379

Vulnerability (CVE-2015-5379) : AXIGEN Mail Server’s Ajax WebMail interface (actions.hsp) before version 9.0 is vulnerable to cross-site scripting via crafted HTML attachments viewed in the WebMail “View attachment” function. Root cause: attachments in the Ajax WebMail view execute script/HTML, e...

CVE-2015-5379: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment...

PT-2017-6847

Name of the Vulnerable Software and Affected Versions AXIGEN Mail Server versions prior to 9.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an email attachment in the Ajax WebMai...

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU...

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service !/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU...

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service

!/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors...