Lucene search
+L

72 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/06 12:00 a.m.•5 views

CVE-2021-36093: Incorrect Regular Expression

It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions...

5.3CVSS5.8AI score0.01108EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/09/06 12:00 a.m.•3 views

PT-2021-21113

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions 7.0.28 and prior OTRS AG OTRS versions 8.0.15 and prior Description: It's possible to create an email which can be stuck while being processed by PostMaster filters...

5.3CVSS0.01108EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/09/06 12:00 a.m.•23 views

OTRS security vulnerabilities

OTRS is a service management software application from OTRS Germany. A security vulnerability exists in OTRS that stems from the possibility that created emails may get stuck in PostMaster filter processing, resulting in a denial of service. No details of the vulnerability are provided at this ti...

5.3CVSS5.5AI score0.01108EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/09/06 12:00 a.m.•14 views

CVE-2021-36093

It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions...

5.3CVSS6.1AI score0.01108EPSS
SaveExploits0References2Affected Software2
osv_cve
osv_cve
•added 2019/12/05 3:15 p.m.•40 views

CVE-2019-18180

Improper Check for filenames with overly long extensions in PostMaster sending in email or uploading files e.g. attaching files to mails of OTRS Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: OTRS Community Edition 5.0.x version 5.0.38...

7.5CVSS6.8AI score
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2019/12/05 3:15 p.m.•21 views

UBUNTU-CVE-2019-18180

Improper Check for filenames with overly long extensions in PostMaster sending in email or uploading files e.g. attaching files to mails of OTRS Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: OTRS Community Edition 5.0.x version 5.0.38...

7.5CVSS6.1AI score0.02572EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2019/12/05 2:54 p.m.•78 views

CVE-2019-18180

Removed by vendor...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/12/05 12:00 a.m.•19 views

PT-2019-15258 · Otrs +2 · Otrs +3

Name of the Vulnerable Software and Affected Versions: OTRS Community Edition versions 5.0.38 and prior OTRS Community Edition versions 6.0.23 and prior OTRS versions 7.0.12 and prior Description: The issue is related to an improper check for filenames with overly long extensions in PostMaster,...

9.8CVSS6.7AI score0.99215EPSS
SaveExploits19References148
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/05 12:00 a.m.•2 views

CVE-2019-18180: Loop with Unreachable Exit Condition

Improper Check for filenames with overly long extensions in PostMaster sending in email or uploading files e.g. attaching files to mails of OTRS Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: OTRS Community Edition 5.0.x version 5.0.38...

7.5CVSS6.2AI score0.02572EPSS
SaveExploits0References2
Mend
Mend
•added 2019/10/07 12:00 a.m.•5 views

WS-2019-0603

In PostgreSQL, versions 9.5 prior to REL9520, 9.6 prior to REL9616, 10 prior to REL1011, 11 prior to REL116, 12 prior to REL121, are vulnerable to uncontrolled resource consumption, due to a missing if maximum child processes are running when creating a new bgworker. When the postmaster’s...

7.1CVSS5.8AI score
SaveExploits0References6
NVD
NVD
•added 2019/08/02 2:15 p.m.•40 views

CVE-2017-18393

cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail SEC-326...

4CVSS3.9AI score0.00698EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/08/02 2:15 p.m.•23 views

CVE-2017-18393

cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail SEC-326...

2.7CVSS5.8AI score0.00698EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/08/02 1:04 p.m.•45 views

CVE-2017-18393

cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail SEC-326...

3.9AI score0.00698EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/02 1:04 p.m.•82 views

CVE-2017-18393

CVE-2017-18393 affects cPanel prior to 68.0.15. The issue is that the system does not block a username of postmaster, which could allow reception of private email. This is the core vulnerability described in multiple connected records (including RH/CVE-2017-18393 and NVD entry). Practical impact:...

4CVSS4.2AI score0.00698EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/02 12:00 a.m.•10 views

CVE-2017-18393: Improper Input Validation

cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail SEC-326...

4CVSS5.8AI score0.00698EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•37 views

PostMaster 3.16/3.17 Proxy Service Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9055/info PostMaster has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization that is performed by the proxy service on user-supplied data. An...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/08/26 7:27 p.m.•19 views

Apple Website Hacked by HodLuM

Apple Website Hacked by HodLuM One of the Apple Sub-Domain claimed to be Defaced By HodLuM as shown above. The Deface Link is just an IMAGE uploaded to Apple domain. Hacker use "N00BZ" word for all Hacker including Anonymous , Lulzsec, Turkish hackers, Inj3t0rs and Exploit-DB's. AOL Postmaster...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/08/14 10:11 a.m.•29 views

AOL Postmaster Website hacked by HODLUM

AOL Postmaster Website hacked by HODLUM AOL'spostmaster.aol.com website was hacked Saturday afternoon by someone who goes by the name "HodLuM." The site was slightly defaced with a message from the hacker. "AOL S3RV3RZ ROOT3D BY HODLUM LOLZ!," the message read. AOL finally discovered the hack, an...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/08/14 10:11 a.m.•14 views

AOL Postmaster Website hacked by HODLUM

AOL Postmaster Website hacked byHODLUM AOL'spostmaster.aol.com website was hacked Saturday afternoon by someone who goes by the name "HodLuM." The site was slightly defaced with a message from the hacker. "AOL S3RV3RZ ROOT3D BY HODLUM LOLZ! ," the message read. AOL finally discovered the hack, an...

7.1AI score
SaveExploits0
xssed
xssed
•added 2010/12/12 12:00 a.m.•24 views

Unfixed XSS vulnerability at www.buscacep.correios.com.br

Security researcher postmaster, has submitted on 12/12/2010 a cross-site-scripting XSS vulnerability affecting www.buscacep.correios.com.br, which at the time of submission ranked 1347 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011...

SaveExploits0References1
Rows per page
Query Builder