nginx denial of service vulnerability (CNVD-2016-00982)

nginx is an HTTP and reverse proxy server that can also be used as a mail proxy server. A security vulnerability exists in nginx that allows remote attackers to submit special requests for denial of service attacks...

Fedora Update for claws-mail FEDORA-2016-2

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Claws-Mail 'src/codeconv.c' Stack Buffer Overflow Vulnerability

Claws-Mail is a mail client product based on GTK+ development. Claws-Mail suffers from a stack buffer overflow vulnerability that can be exploited by attackers to conduct denial of service attacks or execute arbitrary code...

Paragon Initiative Enterprises: Email spoofing

There are few email spoofing tool is available free.one them is http://emkei.cz/ when I tried to send a email from [email protected] to my email ,it was successful but when i tried to send the another from [email protected] , i did not receive any email.Hence, there might be some...

Zomato: Persistent input validation mail encoding vulnerability in the "just followed you" email notification.

This vulnerability allows an attacker to add custom html/js code to emails that are then sent to other users of zomato.com. This vulnerability can be reproduced by any normal user ie. unprivileged accounts by editing their profile's "your full name" field with malicious code. This is not possible...

[20160802] - Core - XSS Vulnerability

Inadequate escaping leads to XSS vulnerability in mail component...

Barracuda Networks MDM - Persistent Mail Vulnerability

Document Title: =============== Barracuda Networks MDM - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1315 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 131...

Barracuda Networks MDM - Persistent Mail Vulnerability

Document Title: =============== Barracuda Networks MDM - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1315 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 131...

Barracuda Networks SN #52 - Persistent Web Vulnerability

Document Title: =============== Barracuda Networks SN 52 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1297 BNSEC ID: 0004001004 Tracking ID: CAS-03491-K1X2V0 Release Date: ============= 2016-02-03 Vulnerability Laborator...

DEBIAN-CVE-2015-8793

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937...

UBUNTU-CVE-2015-8793

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937...

SA110 : Java Deserialization Vulnerabilities

SUMMARY Blue Coat products that deserialize unsafe Java objects from untrusted sources are susceptible to one or more vulnerabilities. A remote attacker can exploit these vulnerabilities to cause the target to execute arbitrary code. AFFECTED PRODUCTS Cloud Data Protection for Salesforce CDP-SFDC...

eBay Magento Persistent Mail Encoding

Document Title: =============== Ebay Magento Bug Bounty 2 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1203 eBay Inc. Bug Bounty Program ID: EIBBP-26644 Release Date: ============= 2016-01-18 Vulnerability Laboratory ID...

SUSE-SU-2016:0267-1 Security update for rubygem-mail-2_4

This update for rubygem-mail-24 fixes the following issues: bsc959129: SMTP Injection via recipient email addresses...

HackerOne: Unintended HTML inclusion as a result of https://hackerone.com/reports/110578

Hi, I was just reading https://hackerone.com/reports/110578 and testing out the changes. I had previously noticed that the editor would take something like: test and turn it into : test In other words, the code would recursively look at what should be the title string and use the first single or...

openSUSE Security Update : rubygem-mail / rubygem-mail-2_4 / rubygem-mail-2_5 (openSUSE-2016-15)

This update for rubygem-mail, rubygem-mail-24, rubygem-mail-25 fixes the following security issues : - boo959129: SMTP Injection via recipient email addresses %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Debian DSA-3452-1 : claws-mail - security update

'DrWhax' of the Tails project reported that Claws Mail is missing range checks in some text conversion functions. A remote attacker could exploit this to run arbitrary code under the account of a user that receives a message from them using Claws Mail. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 3452-1] claws-mail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3452-1 [email protected] https://www.debian.org/security/ Ben Hutchings January 23, 2016 https://www.debian.org/security/faq -...

DSA-3452-1 claws-mail - security update

Bulletin has no description...

Debian Security Advisory DSA 3452-1 (claws-mail - security update)

DrWhax of the Tails project reported that Claws Mail is missing range checks in some text conversion functions. A remote attacker could exploit this to run arbitrary code under the account of a user that receives a message from them using Claws Mail. OpenVAS Vulnerability Test $Id: deb3452.nasl...