PineApp Mail-SeCure test_li_connection RCE

Exploits command injection in PineApp Mail-SeCure via the iptest parameter on /admin/testliconnection.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """PineApp Mail-SeCure testliconnection.php RCE — execute session.""" from future import annotations import re...

PineApp Mail-SeCure - test_li_connection.php RCE Detection

Detects PineApp Mail-SeCure RCE via /admin/testliconnection.php?iptest=127.0.0.1;id. !/usr/bin/env python3 -- coding: utf-8 -- """PineApp Mail-SeCure testliconnection.php command injection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2013-6827

Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the msg parameter...

CVE-2013-6828

admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sysusermng operation via the it parameter...

EUVD-2013-4831

Malware in sbrugna...

EUVD-2013-6630

Malware in sbrugna...

EUVD-2013-6632

Malware in sbrugna...

EUVD-2021-23312

Malware in sbrugna...

EUVD-2013-6629

Malware in sbrugna...

EUVD-2013-6633

Malware in sbrugna...

EUVD-2023-35499

Malicious code in bioql PyPI...

EUVD-2022-27937

Malicious code in bioql PyPI...

EUVD-2022-27936

Malicious code in bioql PyPI...

CVE-2021-36719

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...

CVE-2021-36720

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url= and stealing cookies...

CVE-2013-6831

PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account...

CVE-2013-6830

admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation...

CVE-2013-6829

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation...

CVE-2013-4987

PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command...

PT-2024-29516 · Cybonet · Cybonet Pineapp Mail Relay

Name of the Vulnerable Software and Affected Versions: Cybonet PineApp Mail Relay versions prior to 5.2.1 rev 20jun24 Description: The issue concerns an improper limitation of a pathname to a restricted directory, which may lead to unauthorized access risks. There is an urgent need for action to...