EUVD-2023-36544

Malicious code in bioql PyPI...

CVE-2023-32290

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server...

CVE-2023-32290

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server...

CVE-2023-32290

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server...

myMail iOS 安全漏洞

myMail is an open source mail client from mailbox.org. A security vulnerability exists in myMail iOS version 14.30 and earlier versions, which stems from the application sending plaintext credentials...

CVE-2023-32290

Summary: CVE-2023-32290 affects the myMail app for iOS up to version 14.30, where credentials are sent in cleartext when a server expects STARTTLS. The root issue is improper handling of STARTTLS negotiation, leading to exposure of authentication data. Impact: Confidentiality impact is high as cr...

CVE-2023-32290

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server...

CVE-2023-32290

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server...

Mail.ru: Private file read through file attachment

my.com MyMail application for Android could be tricked by malicious local application selected as a file picker by user to copy the file from application folder to insecure location...

Mail.ru: [myMail Android] Access to protected app components via RegistrationPhoneActivity

RegistrationPhoneActivity of My.com MyMail application for Android could be locally exploited by malicious application to access internal activities as was demonstrated by spoofing logon screen to send authentication request to arbitrary site...

wcomco.net XSS vulnerability

Open Bug Bounty ID: OBB-556199 Description| Value ---|--- Affected Website:| wcomco.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mail.ru: blind XXE when uploading avatar in mymail phone app

Blind XML external ENTITY / DTD injection via avatar upload feature in My.Com's MyMail backend results in potential SSRF...

MyMail 1.0 Login.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18656/info MyMail is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...

Webvizyon Portal 2006 Version SQL Injection

Title : Webvizyon Portal 2006 Version SQL Injection - Site : http://www.Cyber-Warrior.org - Author : StorMBoY - Mail : [email protected] - Exploit : http://www.target.com/path/SayfalaAltList.asp?ID=-1 UNION ALL SELECT 0,kullaniciadi,sifre FROM uyeler - StorMBoY 08.07.2006 -- Get your free emai...

[Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability

Kurdish Security Advisory irc.gigachat.net kurdhack Discovered by Botan http://scripts.codingclick.com/MyMail/ http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-9-mymail-directory.html CodingClick.com MyMail Script is useing for scripts.The passing can do between directory. Examine.. N...

MyMail.txt

Kurdish Security Advisory irc.gigachat.net kurdhack Discovered by Botan http://scripts.codingclick.com/MyMail/ http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-9-mymail-directory.html CodingClick.com MyMail Script is useing for scripts.The passing can do between directory. Examine.. N...

MyMail 1.0 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18656/info MyMail is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

MyMail 1.0 - login.php Cross-Site Scripting

MyMail 1.0 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18656/info MyMail is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...