China Mobile 139 Mailbox Android V6.6.1 suffers from gesture password plaintext storage vulnerability

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A vulnerability exists in the plaintext storage of gesture passwords in China Mobile 139 Mailbox Android V6.6.1. Since the user's gesture password storage is not encrypted, an attacker can utilize the vulnerability to...

Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox PC V2.5.1

139 Mailbox for PC is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox PC V2.5.1. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other information,...

Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox Android V6.6.1

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox Android V6.6.1. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other informatio...

Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox IOS V2.8.2

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox IOS V2.8.2. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other information,...

Multiple vulnerabilities in turbomail

TurboMail email system is an email server system developed for the communication needs of enterprises and institutions. turbomail there are leakage of user mailbox vulnerability, can be login blast vulnerability login authentication code bypass, ordinary user privilege injection vulnerability, if...

Threat Outbreak Alert RuleID25413: Email Messages Distributing Malicious Software on October 4, 2016

Medium Alert ID: 49181 First Published: 2016 October 4 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25413 may contain the following files: Name |...

MS16-107: Description of the security update for Outlook 2013: September 13, 2016

MS16-107: Description of the security update for Outlook 2013: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

MS16-107: Description of the security update for PowerPoint 2013: September 13, 2016

MS16-107: Description of the security update for PowerPoint 2013: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilitie...

Mailbox fishing those things: the Chrome address reverse vulnerability use cases-vulnerability warning-the black bar safety net

First talk about the recently seen one of the more interesting vulnerability, the Google browser chrome address inversion, later we'll said. One day, your mailbox has received an incredible message that may come from your boss or your best friend, do not feel strange, it is likely that you are...

BlackHat world black hat conference official APP there are two logical vulnerability-vulnerability warning-the black bar safety net

! If a common enterprise APP or a website vulnerability, then is actually very normal things. However, if someone and you say FreeBuf or Tick loopholes, then everyone in the hearts of the first reaction is surely“holding a wipe, big news” is! BlackHat conference soon to be held, as the world's mo...

MS16-088: Description of the security update for Outlook 2016: July 12, 2016

None None...

Traveling Mailbox - Corrupted files, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Traveling Mailbox published at the 'play' market has multiple vulnerabilities...

Verizon mailbox now wonderful vulnerability, personal mail can be forwarded to any mailbox-vulnerability warning-the black bar safety net

Verizon is America's Big Three telecommunications giants. A recent Verizon security personnel found the Verizon mailbox system there is a high risk vulnerability can lead to a Verizon mailbox user's mail is any forwarding to other mailbox accounts. Below this screenshot is a Verizon mailbox of a...

Postfix Admin Cross-Site Request Forgery Vulnerability

Postfix Admin is a web-based administration tool for Postfix mail delivery servers. Postfix Admin provides different configuration operations via HTTP GET and HTTP POST, these GET and POST operations cause CSRF attacks. Attackers are able to gain access to the administrator session and add...

Cross-Site Scripting Vulnerability in Times Enterprise Email System

Times Enterprise Email System is a cloud service email processing system for major enterprises. Times Enterprise Email System does not adequately filter the parameters at the mailbox login, and the attacker obtains the user's identity credentials such as cookies by constructing a special XSS code...

Mailbox - BSD license, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mailbox published at the 'play' market has multiple vulnerabilities...

Yahoo repair mailbox vulnerability, the researchers receive a million dollar bonus-vulnerability warning-the black bar safety net

! Currently Yahoo repair a can be attacker for hijacking the user's mailbox vulnerability. The vulnerability is hazards heavier According to the latest news that Yahoo has to fix theXSSvulnerabilities, earlier, a malicious attacker can exploit the vulnerability to send malicious mail, then you ca...

2 6 3 the enterprise mailbox and the personal mailbox pass to kill any user login-bug warning-the black bar safety net

Vulnerability details disclosure status: 2016-01-14: details have been notified vendors and wait for manufacturers processing 2016-01-14: vendor has confirmed, the details only to the manufacturer public 2016-01-14: vendor has fixed the vulnerability and take the initiative to disclose details to...

[SECURITY] Fedora 22 Update: imapsync-1.644-2.fc22

imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...

[SECURITY] Fedora 23 Update: imapsync-1.644-2.fc23

imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...