Alt-N MDaemon WorldClient 8.1.3 - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15815/info MDaemon WorldClient is prone to a denial of service vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to preve...

xNewsletter 1.0 Form Field Input Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4516/info xNewsletter is a script that allows web users to subscribe to a newsletter. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. xNewsletter does not...

eSignal and eSignal Pro <= 10.6.2425.1208 Multiple Vulnerabilites

No description provided by source. Luigi Auriemma Application: eSignal and eSignal Pro http://www.esignal.com/esignal/default.aspx Versions: = 10.6.2425.1208 Platforms: Windows Bugs: A code execution B heap overflow Exploitation: file Date: 06 Sep 2011 Author: Luigi Auriemma e-mail:...

cPanel 5/6,Formail-Clone E-Mail Restriction Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7758/info It has been reported that cPanel is prone to an issue where a remote attacker may bypass cPanel Formail-clone local domain checks and have untrusted e-mail delivered in the context of the vulnerable host. This...

PineApp Mail-SeCure test_li_connection.php Arbitrary Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Avirt Gateway Suite 3.3 a/3.5 Mail Server Buffer Overflow (2)

No description provided by source. source: http://www.securityfocus.com/bid/755/info The Avirt Mail Server 3.3a and 3.5 packages are vulnerable to a remote buffer overflow vulnerability. The buffer overflow can be initiated by passing 856 characters in the password field. source:...

TP-LINK Model No. TL-WR841N / TL-WR841ND - Multiple Vulnerabilities

TP-LINK TL-WR841N / TL-WR841ND are vulnerable to many CSRF and XSS attacks because of no CSRF prevention technique and poor parameters filtration. Attacker is able to compromise router and steal config & log files. Title: TP-LINK Model No. TL-WR841N / TL-WR841ND - Multiple Vulnerabilities Date:...

dovecot: denial of service through maxxing out SSL connections

Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service resource consumption via an incomplete SSL/TLS handshake for an IMAP/POP3 connection...

FangMail储存型XSS

简要描述： http://www.fangmail.net/abous/Successcase.html 近10w客户？ 详细说明： 邮件正文插入 即可触发。 漏洞证明：...

Updated sendmail packages fix CVE-2014-3956

Updated sendmail packages fix security vulnerability: Sendmail before 8.14.9 does not properly closing file descriptors before executing programs. This bug could enable local users to interfere with an open SMTP connection if they can execute their own program for mail delivery e.g., via procmail...

[SECURITY] Fedora 19 Update: sendmail-8.14.7-2.fc19

The Sendmail program is a very widely used Mail Transport Agent MTA. MTAs send mail from one machine to another. Sendmail is not a client program, which you use to read your email. Sendmail is a behind-the-scenes program which actually moves your email over networks or the Internet to where you...

CVE-2012-2592

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

Cross site scripting

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

CVE-2012-2592

CVE-2012-2592 affects Axigen Mail Server 8.0.1 and is a Cross-site Scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the body of an email. Connected sources confirm the affected product and vulnerability class, but do not provide a patch version or remedi...

CVE-2012-2592

Cross-site scripting XSS vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

Coremail 邮件系统存储型 XSS

简要描述： 设计疏忽导致可执行恶意 JavaScript 代码。 详细说明： 我原以为和 WooYun: Coremail邮件系统存储型XSS之二 这里是同一种文件漏洞，问过之后，了解到不是同一个。 本漏洞是直接预览 SVG 图片附件，会触发 SVG 内部脚本。新版本 Coremail “除了部分格式的图片和PDF”，不知道有没有修复这个问题，姑且发出来吧。 如图，用户预览附件即会触发 XSS。 （不嫌麻烦的话可以配合之前获取 sid/mid 的漏洞，在正文内插入链接、跳转到附件 SVG 的预览地址，作为伪装。） 漏洞证明：...

Secunia.com CSI/VIM - Persistent Validation Vulnerabilities

Document Title: =============== Secunia.com CSI/VIM - Persistent Validation Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1272 Article:...

Secunia.com CSI/VIM - Persistent Validation Vulnerabilities

Document Title: =============== Secunia.com CSI/VIM - Persistent Validation Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1272 Article:...

Debian Security Advisory DSA 2960-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2960.nasl 6724 2017-07-14...

Phabricator: Abusing daemon logs for Privilege escalation under certain scenarios

Setup Needed + A normal user account + A momentary disruption of mail services Replication steps + Login as normal user + Wait for momentary disruption of mail services + Use Password Reset Link for admin mail address + BOOM!!! + You can see the password reset link in the daemon logs because of...