15704 matches found
Trend Micro IMSVA Management Portal 9.1.0.1600 Authentication Bypass Exploit
Trend Micro IMSVA Management Portal version 9.1.0.1600 suffers from an authentication bypass vulnerability. Title: Trend Micro IMSVA Management Portal Authentication Bypass Advisory ID: KL-001-2018-006 Publication Date: 2018.02.08 Publication URL:...
Open-Xchange: [XSS] Style/Event Filter Bypass v3.0
Hi. New ways to bypass filter in the mail. Previous reports 279073, 244821 1. onEvent filter bypass - If add in style, then onEvents filter disabled. Send e-mail: json "content": "", Response: json "content":"" 2. Without onEvents - Without you can using : json "content": "aaa", Response: json...
WordPress Mail Masta 1.0 File Disclosure
File disclosure vulnerability in WordPress Mail Masta plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Exim SMTP Mail Server Buffer Overflow Vulnerability
Exim is a MTA Mail Transfer Agent, Mail Transfer Agent server software, which is developed under the GPL and is open source software. The software mainly runs on UNIX-like systems. Usually the software will be used with Dovecot or Courier and other software. A buffer overflow vulnerability exists...
The vulnerability of Kaspersky Secure Mail Gateway’s email protection mechanism, related to insecure privilege management, allows unauthorized access to root rights.
The vulnerability of Kaspersky Secure Mail Gateway lies in the insecure management of privileges. Exploiting this vulnerability could allow a local attacker to gain root access to the targeted system using a specially crafted script...
The vulnerability in the web console of the Kaspersky Secure Mail Gateway security tool, which allows access to the root user rights.
The vulnerability of the Kaspersky Secure Mail Gateway web console relates to deficiencies in the process of eliminating special elements from the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root user privilege...
The vulnerability in the web console of the Kaspersky Secure Mail Gateway protection tool allows for XSS attacks to be carried out.
The vulnerability of the Kaspersky Secure Mail Gateway web console protection tool is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root access to the attacked system using a...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition (futomi Co., Ltd.) is vulnerable to OS command injection (CWE-78). Affected: Ver 2.0.13 and earlier. Impact: remote attacker may execute arbitrary OS commands. Root cause: OS command injection in the CGI that handles web form mail. Remediation: update to the lat...
MP Form Mail CGI eCommerce Edition vulnerable to OS command injection
Overview MP Form Mail CGI eCommerce Edition provided by futomi Co., Ltd. is a CGI used to send mail from a web form. MP Form Mail CGI eCommerce Edition contains an OS command injection vulnerability CWE-78. Daiki Ichinose of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA...
Kaspersky Secure Mail Gateway Cross-Site Request Forgery Vulnerability
Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A cross-site request forgery vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. A remote...
UBUNTU-CVE-2018-6789
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely...
Kaspersky Secure Mail Gateway Configuration File Injection Vulnerability
Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A security vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. An attacker can exploit the...
Kaspersky Secure Mail Gateway Local Elevation of Privilege Vulnerability
Kaspersky Secure Mail Gateway is a suite of email security solutions from Russia's Kaspersky Lab. Kaspersky Secure Mail Gateway suffers from a security vulnerability that allows a local attacker to exploit the vulnerability by submitting special requests for elevated privileges...
Kaspersky Secure Mail Gateway Cross-Site Scripting Vulnerability
Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A cross-site scripting vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. A remote attacker...
[SECURITY] Fedora 27 Update: thunderbird-52.6.0-1.fc27
Mozilla Thunderbird is a standalone mail and newsgroup client...
CVE-2018-6289
Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1...
