15700 matches found
[SECURITY] Fedora 28 Update: thunderbird-60.0-1.fc28
Mozilla Thunderbird is a standalone mail and newsgroup client...
CentOS Update for mutt CESA-2018:2526 centos7
Check the version of mutt SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882938";...
CentOS 6 / 7 : mutt (CESA-2018:2526)
An update for mutt is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
A week in security (August 13 – August 19)
Last week on Malwarebytes Labs, we talked about how Process Doppelgänging meets Process Hollowing in the Osiris dropper, provided hints, tips, and links for a safer school year, gave a recap of Black Hat USA 2018, offered some tips for a secure content management system, highlighted a silly...
Important: Red Hat Security Advisory: mutt security update
An update for mutt is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
Liar, liar, pants on fire! Barclays phish claims cards explode
We feel compelled to relay the dire warning from this Barclays snail-mail letter, which we acquired through social media, therefore it must be true. Warning: Barclays debit cards may catch fire! The letter reads as follows: Dear costumer, Many of our bank costumers have reported that their debit...
OpenSC 0.18.0 Buffer Overflow / Out Of Bounds Read Vulnerability
Multiple issues have been identified in OpenSC, ranging from stack based buffer overflows to out of bounds reads and writes on the heap. They can be triggered by malicious smartcards sending malformed responses to APDU commands. Additionally to those fixes reported here, a lot of minor issues eg...
curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP
A heap-based buffer overflow has been found in the Curlsmtpescapeeob function of curl. An attacker could exploit this by convincing a user to use curl to upload data over SMTP with a reduced buffer to cause a crash or corrupt memory...
CVE-2018-14951
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...
CVE-2018-14950
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...
CVE-2018-14953
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...
CVE-2018-14952
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...
CVE-2018-14954
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...
[SECURITY] Fedora 27 Update: thunderbird-52.9.1-1.fc27
Mozilla Thunderbird is a standalone mail and newsgroup client...
Zimbra 8.6.0_GA_1153 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Xss Zimbra Mail server Exploit Author: Dinbar78 Vendor Homepage: https://www.zimbra.com/ Version: 8.6.0GA1153 build 20141215151110 bug 103609 or CVE-2016-3411 Payload: es. https:// zimbrasite/h/changepass?skin="alert'hacked';...
aqua-mail.com XSS vulnerability
Open Bug Bounty ID: OBB-662498 Description| Value ---|--- Affected Website:| aqua-mail.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Zimbra 8.6.0_GA_1153 - Cross-Site Scripting
Exploit Title: Xss Zimbra Mail server Google Dork: Date: 2018/08/10 Exploit Author: Dinbar78 Vendor Homepage: https://www.zimbra.com/ Version: 8.6.0GA1153 build 20141215151110 bug 103609 or CVE-2016-3411 Payload: es. https:// zimbrasite/h/changepass?skin="alert'hacked';...
CVE-2018-8041
Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal...
Microsoft Windows SCF File Feature Bypass
Exploit Title: Microsoft Windows 'SCF' File 'Open File Security Warning' Feature Bypass Vulnerability Google Dork: N/A Date: August 3, 2018 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: http://www.microsoft.com/ Version: Windows 7 SP1, 8.1 with full...
