[SECURITY] Fedora 22 Update: cyrus-imapd-2.4.18-1.fc22

The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...

Netease mailbox leaked battle network PayPal, etc. accounts may be hacked-vulnerability warning-the black bar safety net

The black bar safety net announced the discovery of Netease mailbox new vulnerability, this vulnerability may lead to Netease mailbox over a million data leaks, involving Netease mailbox-war network account number, PayPal account number and other network accounts fear will be affected, recommende...

FTGate 7 Cross Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FTGATE-V7-CSRF.txt Vendor: ================================ www.ftgate.com www.ftgate.com/ftgate-update-7-0-300 Product: ================================ FTGate v7 Vulnerability Type:...

FTGate 7 - Cross-Site Request Forgery

FTGate 7 - Cross-Site Request Forgery + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FTGATE-V7-CSRF.txt Vendor: ================================ www.ftgate.com www.ftgate.com/ftgate-update-7-0-300 Product:...

FTGate 7 - Cross-Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-FTGATE-V7-CSRF.txt Vendor: ================================ www.ftgate.com www.ftgate.com/ftgate-update-7-0-300 Product: ================================ FTGate v7 Vulnerability Type:...

openSUSE Security Update : cyrus-imapd (openSUSE-2015-606)

This update provides version 2.4.18 of cyrus-imapd - Security fix: handle urlfetch range starting outside message range - A bunch of cleanups and fixes to compiling - A bunch of sieve cleanups - Enhanced SSL/TLS configuration options - Disable use of SSLv2/SSLv3 - Allow SQL backend for mboxlist a...

Multiple IBM Tivoli Storage Products Information Disclosure Vulnerabilities

IBM Tivoli Storage FlashCopy Manager for Microsoft Exchange Server and others are products of IBM Corporation, USA.Tivoli Storage FlashCopy Manager for Microsoft Exchange Server is a suite of solution for advanced data protection for critical applications and databases in e-mail servers running...

CVE-2015-4950

The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1...

CVE-2015-4950

The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1...

CVE-2015-4950

The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1...

CVE-2015-4950

CVE-2015-4950 affects IBM Tivoli Storage FlashCopy Manager for Microsoft Exchange, Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server, and Tivoli Storage Manager FastBack for Microsoft Exchange. The root cause is that the mailbox-restore functionality does not consiste...

Java website exposure local file inclusion（LFI）vulnerability, you can read more than 4 6 0 Oracle employees mailbox-vulnerability warning-the black bar safety net

Italian security researchers Christian Galeone recently discovered a coin from the Java official web presence of significant security vulnerabilities, the vulnerability can be read a website of sensitive data, including over 4 6 0 Oracle the company the employee's mailbox. Java website local file...

Google could be forged domain mailbox fishing-vulnerability warning-the black bar safety net

! Recently Google Apps for Work exposed a vulnerability that an attacker can use the vulnerability to falsification of any of the site's domain name mailbox, posing as company employees to the victims, sending phishing mail. Google domain mail service 如果 你 想 弄 一 个 类似 [email protected] 的 DIY 邮箱 来 代替...

Password retrieve logic vulnerability summary-vulnerability warning-the black bar safety net

0x00 background description Please note these two articles: Password retrieve function there may be a problem Password retrieve function there may be issues supplemented From the above two documents the past six months, recently finishing a password to get back to the mind map, open the collectio...

AnyMacro Mail System Stored Cross-Site Scripting Vulnerability

AnyMacro is a professional product and solution provider in the field of email and unified messaging. A stored cross-site scripting vulnerability exists in the AnyMacro mail system, which allows an attacker to gain access to all mailbox account privileges view, modify, delete, etc. by exploiting...

Lower mistakes: the U.S. telecommunications Verizon（Verizon）APP vulnerability exists, can be read-vulnerability warning-the black bar safety net

! Verizon（Verizon is the largest US telecommunications companies. Recently, security researchers at Verizon（Verizon its FiOS mobile APP on found a high-risk vulnerability that can allow an attacker access to millions of Verizon user's email account. Vulnerability details FiOS mobile APP on this...

webwinmail to brute force crack the falsification of any of the mailbox the sender-vulnerability warning-the black bar safety net

First of all, we landed an account test02,as shown: ! 7. png We test01 set up inside a proxy of the sender, here we set another account name called test02 ! 8. png ! 9. png We go to test01 view: ! 1 0. png We violence to crack this CAPTCHA: ! 1 1. png ! 1 2. png Hack is finished, we look at: ! 1 ...

CVE-2014-4757

CVE-2014-4757 affects the Outlook Extension in IBM Content Collector (version 4.0.0.x) prior to 4.0.0.0-ICC-OE-IF004. The issue lets local users bypass the Reviewer privilege and read e-mail messages from an arbitrary mailbox by invoking the Search function. The NVD entry lists a low severity (CV...

CVE-2014-4945

Multiple cross-site scripting XSS vulnerabilities in Horde Internet Mail Program IMP before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via an unspecified flag in the basic 1 mailbox or 2 message view...

CVE-2014-4946

Multiple cross-site scripting XSS vulnerabilities in Horde Internet Mail Program IMP before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via 1 unspecified flags or 2 a mailbox name in the dynamic mailbox view...