2190 matches found
PT-2024-41036 · Stalker · Communigate Pro
Name of the Vulnerable Software and Affected Versions: CommuniGate Pro affected versions not specified Description: The issue is related to a buffer overflow on the stack in the CommuniGate Pro mail server. Exploitation of this issue may allow a remote attacker to execute arbitrary code...
Advisory ROSA-SA-2024-2528
Software: libspf2 1.2.11 OS: rosa-server79 packageevrstring: libspf2-1.2.11-11.20210922git4915c308.res7 CVE-ID: CVE-2021-20314 BDU-ID: 2021-04420 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the SPF protocol library libspf2 is related to an operation exceeding buffer boundaries in memory...
U.S. Dept Of Defense: Exposed Extremely Sensitive Information in Public ZIP File
A publicly accessible ZIP file containing sensitive information, including SMTP credentials, database connection details, and AWS secret keys, was discovered. The sensitive data was exposed due to the lack of proper access controls and encryption. The exposed credentials could have been misused f...
Moderate: cyrus-imapd security update
The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. Security Fixes: cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command CVE-2024-34055 For more details about the security issues, including the impact, a CVSS...
CVE-2024-50601
Persistent and reflected XSS vulnerabilities in the themeMode cookie and h URL parameter of Axigen Mail Server up to version 10.5.28 allow attackers to execute arbitrary Javascript. Exploitation could lead to session hijacking, data leakage, and further exploitation via a multi-stage attack. Fixe...
Axigen Mail Server 安全漏洞
Axigen Mail Server is a mail server software from Gecad Technologies. A security vulnerability exists in Axigen Mail Server version 10.5.28 and earlier, which stems from vulnerability to cross-site scripting attacks...
CVE-2024-50601
Axigen Mail Server versions up to 10.5.28 are vulnerable to persistent and reflected XSS due to improper neutralization of input in the themeMode cookie and _h URL parameter. An attacker can execute arbitrary Javascript , potentially resulting in session hijacking , data leakage , or multi-stage ...
CVE-2024-50601
Persistent and reflected XSS vulnerabilities in the themeMode cookie and h URL parameter of Axigen Mail Server up to version 10.5.28 allow attackers to execute arbitrary Javascript. Exploitation could lead to session hijacking, data leakage, and further exploitation via a multi-stage attack. Fixe...
CVE-2024-50601
Persistent and reflected XSS vulnerabilities in the themeMode cookie and h URL parameter of Axigen Mail Server up to version 10.5.28 allow attackers to execute arbitrary Javascript. Exploitation could lead to session hijacking, data leakage, and further exploitation via a multi-stage attack. Fixe...
CVE-2024-50601: Improper Neutralization of Input During Web Page Generation
Persistent and reflected XSS vulnerabilities in the themeMode cookie and h URL parameter of Axigen Mail Server up to version 10.5.28 allow attackers to execute arbitrary Javascript. Exploitation could lead to session hijacking, data leakage, and further exploitation via a multi-stage attack. Fixe...
WS-2021-0396
Vulnerability in Maddy Mail Server, the S3 storage write is not aborted on errors leading to Unbounded memory usage...
The vulnerability of the Dovecot mail server, which relies on unconstrained resource distribution without any restrictions or regulations, allows attackers to cause service failures.
The vulnerability of the Dovecot mail server is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service failures...
CVE-2024-50624
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...
CVE-2024-50624
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...
CVE-2024-50624
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...
CVE-2024-50624
The KDE Kmail application (specifically kmail-account-wizard ) is vulnerable in versions before 6.2.0 due to the use of cleartext HTTP for retrieving email server configurations from URLs such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig. This flaw, identified in ...
KDE KMail 安全漏洞
KDE KMail is an email component in Kontact a personal information management suite from the KDE community. A security vulnerability exists in KDE KMail versions prior to 6.2.0 that stems from plaintext HTTP being used for URLs to retrieve configurations, which allows an attacker to trigger the us...
Exploit for Cross-site Scripting in Roundcube Webmail
CVE-2024-37383-POC Proof of concept for CVE-2024-37383 Int...
ROS-20241021-04
A vulnerability in the Dovecot mail server is related to the fact that the application does not control the consumption of internal resources properly when parsing too large email headers. internal resources properly when parsing excessively large email headers. Exploitation of the vulnerability...