PineApp Mail-SeCure test_li_connection RCE

Exploits command injection in PineApp Mail-SeCure via the iptest parameter on /admin/testliconnection.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """PineApp Mail-SeCure testliconnection.php RCE — execute session.""" from future import annotations import re...

PineApp Mail-SeCure - test_li_connection.php RCE Detection

Detects PineApp Mail-SeCure RCE via /admin/testliconnection.php?iptest=127.0.0.1;id. !/usr/bin/env python3 -- coding: utf-8 -- """PineApp Mail-SeCure testliconnection.php command injection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2013-6827

Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the msg parameter...

CVE-2013-6828

admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sysusermng operation via the it parameter...

EUVD-2013-4831

Malware in sbrugna...

EUVD-2013-6630

Malware in sbrugna...

EUVD-2013-6632

Malware in sbrugna...

EUVD-2021-23312

Malware in sbrugna...

EUVD-2013-6629

Malware in sbrugna...

EUVD-2013-6633

Malware in sbrugna...

CVE-2021-36719

PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code...

CVE-2021-36720

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url= and stealing cookies...

CVE-2013-6831

PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account...

CVE-2013-6830

admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation...

CVE-2013-6829

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation...

CVE-2013-4987

PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command...

PineApp Mail Secure has a path traversal vulnerability

Cybonet PineApp Mail Secure from Cybonet Israel blocks most malicious email threats at the network perimeter while providing a range of additional options for comprehensive security and message control. A path traversal vulnerability exists in PineApp Mail Secure, which arises from pathnames bein...

CVE-2023-31183

Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...

CVE-2023-31183 Cybonet PineApp Mail Secure RXSS vulnerability

Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...

CVE-2023-31183: Improper Neutralization of Input During Web Page Generation

Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...