1540 matches found
CVE-2015-2702
Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...
PT-2015-5843
Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Websense TRITON V-Series appliances version 7.7 Description A cross-site scripting XSS issue exists in the Message Log of the Email Security Gateway, allowing remote attackers to inject arbitrar...
CVE-2015-2702: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...
Kofax e-Transactions Sender Sendbox File Injection Vulnerability
Kofax e-Transactions Sender Sendbox is an add-on application to a suite of Kofax conversion modules from Kofax USA that automates the electronic transfer of documents to business processes via secure e-mail. A file injection vulnerability exists in Kofax e-Transactions Sender Sendbox, which allow...
Code injection
The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...
CVE-2011-5294
The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...
CVE-2011-5294
The CVE-2011-5294 issue affects Kofax e-Transactions Sender Sendbox 2.5.0.933, specifically the LEADeMail.LEADSmtp.20 ActiveX control (LTCML14n.dll 14.0.0.34). The SaveMessage method allows remote attackers to write to arbitrary files via a pathname supplied as the first argument. Multiple connec...
PT-2015-3490
Name of the Vulnerable Software and Affected Versions Kofax e-Transactions Sender Sendbox version 2.5.0.933 Description The issue allows remote attackers to write to arbitrary files via a pathname in the first argument of the SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control...
CVE-2011-5294: Undefined Security Weakness
The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...
webwinmail to brute force crack the falsification of any of the mailbox the sender-vulnerability warning-the black bar safety net
First of all, we landed an account test02,as shown: ! 7. png We test01 set up inside a proxy of the sender, here we set another account name called test02 ! 8. png ! 9. png We go to test01 view: ! 1 0. png We violence to crack this CAPTCHA: ! 1 1. png ! 1 2. png Hack is finished, we look at: ! 1 ...
CVE-2014-7098
The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7098
The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7098
Affected product : Fylet Secure Large File Sender (aka com.application.fyletFileSender) app version 2.0 for Android. Root cause : the client does not verify X.509 certificates from SSL servers. Impact : enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...
PT-2014-7766
Name of the Vulnerable Software and Affected Versions Fylet Secure Large File Sender version 2.0 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...
CVE-2014-7098: Undefined Security Weakness
The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
[SECURITY] Fedora 21 Update: rsyslog-7.4.10-5.fc21
Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up,...
Exim Sender 3.35 Verification Remote Stack Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be triggered by a malicious e-mail...
FForm Sender 1.0 Processform.PHP3 Name Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14324/info A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in dynamically generated Web pages...
Form Sender 1.0 Processform.PHP3 Failed Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14326/info A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in dynamically generated Web pages...