14 matches found
mailenable-cve-2022-36934
MailEnable CVE-2022-36934 エクスプロイトモジュール MailEnableの認証バイパス脆弱性(CVE-2022-36934)を突き、リモートコード実行に至らせるMetasploitモジュールです。 📌 特徴 SMTP/POP3におけるMailEnableの不適切な入力サニタイズを悪用します x86およびx64のWindowsターゲットをサポート ユーザーの操作は不要(細工されたメールで自動トリガー) MailEnable バージョン set LHOST set PAYLOAD windows/x64/meterpreter/reversetcp exploit ...
CVE-2019-11395
CVE-2019-11395 Descripción general Esta prueba de concepto PoC demuestra una vulnerabilidad de desbordamiento de búfer en MailCarrier 2.51, que permite a atacantes remotos ejecutar código arbitrario mediante una cadena larga. La vulnerabilidad puede explotarse utilizando los siguientes procesos:...
AZL-86658 CVE-2026-4873 affecting package curl for versions less than 8.11.1-7
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...
AZL-86685 CVE-2026-4873 affecting package cmake for versions less than 3.30.3-14
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...
EUVD-2020-7064
Malware in sbrugna...
EUVD-2020-7924
Malware in sbrugna...
MGASA-2020-0366 Updated libetpan packages fix a security vulnerability
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data e.g., from a meddler-in-the-middle attacker and evaluates it in a TLS...
CVE-2020-15953
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data e.g., from a meddler-in-the-middle attacker and evaluates it in a TLS...
CVE-2020-15953
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data e.g., from a meddler-in-the-middle attacker and evaluates it in a TLS...
OPENSUSE-SU-2020:0915-1 Security update for mutt
This update for mutt fixes the following issues: - CVE-2020-14954: Fixed a response injection due to a STARTTLS buffering issue which was affecting IMAP, SMTP, and POP3 bsc1173197. - CVE-2020-14093: Fixed a potential IMAP Man-in-the-Middle attack via a PREAUTH response bsc1172906, bsc1172935. -...
OWASP SSL audit: O-Saft
O-Saft is an easy to use tool to show informations about SSL certificate and tests the SSL connection according given list of ciphers and various SSL configurations. It’s designed to be used by penetration testers, security auditors or server administrators. The idea is to show the important...
GFI Faxmaker Fax Viewer 10.0 (build 237) - Denial of Service (PoC)
GFI Faxmaker Fax Viewer 10.0 build 237 - Denial of Service PoC !/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Foun...
GFI Faxmaker Fax Viewer 10.0 (build 237) - Denial of Service (PoC)
!/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Found: Oct 28th 2011 Tested on: Windows XP SP3 Professional English...
GFI Faxmaker - Fax Viewer v10.0[build 237] DoS (Poc)
Exploit for windows platform in category dos / poc !/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Found: Oct 28th...