baserCMS plugin Mail vulnerable to cross-site request forgery

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Mail contain a cross-site request forgery vulnerability. Isao Takaesu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with t...

baserCMS plugin Mail vulnerable to cross-site scripting

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Mail contain a stored cross-site scripting vulnerability. Isao Takaesu of Mitsui Bussan Secure Directions, Inc. and Norihiko Hirukawa of FiveDrive Inc. reported this...

JVN#92765814: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugins "Blog", "Mail", "Feed", and "Uploader" contain the following vulnerabilities. Cross-site request forgery CWE-352 - CVE-2016-4879, CVE-2016-4881, CVE-2016-4884, CVE-2016-4885,...

Microsoft Exchange Sensitive Data Search: MailSniper

Microsoft Exchange Sensitive Data Search MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms passwords, insider intel, network architecture information, etc.. It can be used as a non-administrative user to search their own...

Symantec Mail Security for Exchange and Domino Decomposer Engine Multiple DoS (SYM16-015)

The version of Symantec Mail Security for Exchange SMSMSE or Symantec Mail Security for Domino SMSDOM installed on the remote Windows host is affected by multiple denial of service vulnerabilities in the decomposer engine : - A denial of service vulnerability exists in the decomposer engine due t...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to bypass virus or spam detection systems

The vulnerability of the Microsoft Outlook email client is related to the improper implementation of the requirements specified in RFC 2046. Exploiting this vulnerability allows a malicious actor to bypass virus or spam detection systems by using specially crafted MIME data in email attachments...

CVE-2016-4747

Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...

CVE-2016-4747

Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...

Design/Logic Flaw

Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...

CVE-2016-4747

Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...

CVE-2016-4747

CVE-2016-4747 refers to a vulnerability in Apple iOS Mail prior to 10, where certificate handling could allow a network attacker to perform MITM to obtain mail credentials. The issue arises from how untrusted certificates are processed in Mail, enabling credential exposure via unspecified vectors...

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07699)

Apple iOS is an operating system developed by Apple for mobile devices, and Mail is one of the mail clients. A security restriction bypass vulnerability exists in Mail in Apple iOS versions prior to 10. The vulnerability can be exploited by an attacker to bypass security restrictions, perform...

Suspicious Metadata Mail Phishing Containing Attachment

Mail attachment containing a malicious downloader was observed as part of ransomware campaigns. A remote attacker could send spam e-mails including those downloaders and convince users to manually enable them. This would allow the malicious code to run and infect the target system...

Apple iOS < 10 Multiple Vulnerabilities (BlueBorne)

Binary data appleios100check.nbin...

CVE-2016-3366

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office...

SA131 : TCP Session Hijacking in Operating Systems Supporting RFC 5961

SUMMARY Blue Coat products that include a vulnerable version of an operating system that supports RFC 5961 are susceptible to a TCP session hijacking vulnerability. A remote, off-path attacker can infer the sequence numbers of an existing TCP connection, and either reset the connection or inject...

Suspicious Microsoft Publisher Mail Attachment

Microsoft Office Publisher files might contain a malicious downloader. A remote attacker could send spam e-mails including those downloaders, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...

[SECURITY] Fedora 24 Update: thunderbird-45.3.0-1.fc24

Mozilla Thunderbird is a standalone mail and newsgroup client...

iOS 10 Security Updates Move to HTTPS

Update Apple has finally moved its iOS security update mechanism to HTTPS with today’s release of iOS 10. Previously, updates were sent to devices over HTTP and attackers already present on a network could interfere with updates. “An issue existed in iOS updates, which did not properly secure use...

Open-Xchange App Suite 7.8.2 - Cross-Site Scripting

Open-Xchange App Suite 7.8.2 - Cross-Site Scripting Product: OX App Suite Vendor: OX Software GmbH Internal reference: 46484 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.8.2 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status:...