952 matches found
Mailing List Manager Pro 3.0 - SQL Injection
Exploit Title: Mailing List Manager Pro 3.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.vote-pro.com/ Software Link: http://www.mailing-manager.com/demo.html Demo: http://www.mailing-manager.com/demo-gold/ Version: 3.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...
Sql injection
Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template...
CVE-2017-15967
Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template...
CVE-2017-15967
Affected software and vulnerability details (CVE-2017-15967) : Mailing List Manager Pro 3.0 is affected by an SQL Injection vulnerability. The issue is exploitable via the edit parameter in two endpoints: admin/users (when sort=login) and admin/template. Public PoCs/exploit references show crafte...
CVE-2017-15967
Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template...
[SECURITY] Fedora 25 Update: procmail-3.22-44.fc25
Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...
Internet Bug Bounty: Out of bounds read in libcurl's IMAP FETCH response parser
Reported to the curl security mailing list on 6 October 2017. Acknowledged on 6 October 2017. Patched on 8 October 2017. Reported to distros@openwall on 17 October 2017. Public release on 23 October 2017. CVE Pending. Vulnerability An IMAP FETCH response line indicates the size of the returned...
[SECURITY] Fedora 27 Update: procmail-3.22-44.fc27
Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...
Security update for MozillaThunderbird (important)
Mozilla Thunderbird was updated to 52.4.0 boo1060445 new behavior was introduced for replies to mailing list posts: "When replying to a mailing list, reply will be sent to address in From header ignoring Reply-to header". A new preference mail.overridelistreplyto allows to restore the previous...
Security update for MozillaThunderbird (important)
Mozilla Thunderbird was updated to 52.4.0 boo1060445 new behavior was introduced for replies to mailing list posts: "When replying to a mailing list, reply will be sent to address in From header ignoring Reply-to header". A new preference mail.overridelistreplyto allows to restore the previous...
[SECURITY] [DSA 3976-1] freexl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3976-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 17, 2017 https://www.debian.org/security/faq -...
OWASP ZSC - Shellcode/Obfuscate Code Generator
OWASP ZSC is an open source software in Python language which lets you generate customized shellcodes and convert scripts to an obfuscated script. This software can be run on Windows/Linux/OSX under Python. Usage of shellcodes Shellcodes are small codes in Assembly language which could be used as...
Information Disclosure in TYPO3 CMS
It has been discovered, that TYPO3 CMS is susceptible to Information Disclosure. Component Type: TYPO3 CMS Release Date: September 5, 2017 Vulnerability Type: Information Disclosure Affected Versions: 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 Severity: Low Suggested CVSS v2.0:...
[SECURITY] [DSA 3928-2] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3928-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 16, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3929-1] libsoup2.4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3929-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2017 https://www.debian.org/security/faq -...
SQL Injection
dolibarr is susceptible to multiple SQL injection vulnerabilities. The vulnerabilities exist because it does not filter the user-supplied data before using it in an SQL query, allowing the attackers to inject malicious SQL through the 1 contactid parameter in an addcontact action, 2 ligne paramet...
[SECURITY] [DSA 3902-1] jabberd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3902-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 05, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3864-1] fop security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3864-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 27, 2017 https://www.debian.org/security/faq -...
albatros.cultuzz.de XSS vulnerability
Open Bug Bounty ID: OBB-230922 Description| Value ---|--- Affected Website:| albatros.cultuzz.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
defmin.fi XSS vulnerability
Vulnerable URL: http://www.defmin.fi/mailinglist/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1162337 VIP website status:| No Check defmin.fi SSL connection:| Grade: A Coordinat...