Command injection

Fleet before 2.1.2 allows exposure of SMTP credentials...

CVE-2019-1020009

CVE-2019-1020009 affects Fleet prior to 2.1.2, enabling exposure of SMTP credentials. Multiple sources confirm the issue arises from insecure SMTP login, exposing credentials to MITM-type risks when connecting to the SMTP server. No explicit fixes are documented in the provided materials; remedia...

CVE-2019-1020009

Fleet before 2.1.2 allows exposure of SMTP credentials...

WordPress Contact Form & SMTP by PirateForms plugin <= 1.5.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet in WordPress Contact Form & SMTP by PirateForms plugin versions = 1.5.1. Solution Update the WordPress Contact Form & SMTP by PirateForms plugin to the latest available version at least 1.5.2...

WordPress Contact Form & SMTP by PirateForms plugin <= 1.5.1 - HTML Injection vulnerability

HTML Injection vulnerability found by Jerome Bruandet in WordPress Contact Form & SMTP by PirateForms plugin versions = 1.5.1. Solution Update the WordPress Contact Form & SMTP by PirateForms plugin to the latest available version at least 1.5.2...

Pirate Forms < 2.5.2 - HTML Injection & CSRF

The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin was affected by a HTML Injection & CSRF security vulnerability...

Kartpay: Application Error disclosure, Verification token seen error and user able to change password

Summary: Application Error disclosure, Verification token seen error and user able to change password Browsers Verified In: Broswer version: Google Chrome is up to date Version 75.0.3770.100 Official Build 64-bit Steps To Reproduce: add details for how we can reproduce the issue Steps to reproduc...

Kartpay: SMTP Failure Leads to Chain of Internal System Failure

Kartpay Application uses the third Party SMTP Service to send the Email and while using the same application was not coded properly to handle the failure of SMTP. So it has been implemented once it was found and reported...

Atlassian JIRA 7.6.x < 7.6.14, 7.13.x < 7.13.5, 8.0.x < 8.0.3, 8.1.x < 8.1.2, 8.2.x < 8.2.3 RCE

Binary data 700899.prm...

Atlassian JIRA Server & JIRA Data Center Template Injection Vulnerability

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators...

CVE-2019-11581 - Template injection in various resources

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. For this issue to be exploitable at least one of the following conditions must be met: an SMTP server has been configured in Jira and the Contact...

CVE-2019-11581 - Template injection in various resources

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. For this issue to be exploitable at least one of the following conditions must be met: an SMTP server has been configured in Jira and the Contact...

Use Malicious Code Protector for SMTP

...

Covert Keylogging: Sniping your Typing

There have been many attempts at making key logging devices or software over the years, however, whilst a DIY solution is usually made from large Raspberry Pi devices or Arduino boards, the KeyLogger PRO offering from Maltronics has raised a few eyebrows with regards to the wealth of features...

PSF-2019-1 smtplib unlimited read

The smtplib module doesn't limit the amount of read data in its call to readline. An erroneous or malicious SMTP server can trick the smtplib module to consume large amounts of memory...

Free SMTP Server 2.5 - Denial of Service (PoC)

Exploit Title: Free SMTP Server - Local Denial of Service Crash PoC Date: February 3, 2009 Exploit Author: Metin Kandemir kandemir Vendor Homepage: http://www.softstack.com/freesmtp.html Software Link: https://free-smtp-server.en.uptodown.com/windows/download Version: 2.5 Tested on: Windows 7...

Free SMTP Server 2.5 - Denial of Service (PoC)

Free SMTP Server 2.5 - Denial of Service PoC Exploit Title: Free SMTP Server - Local Denial of Service Crash PoC Date: February 3, 2009 Exploit Author: Metin Kandemir kandemir Vendor Homepage: http://www.softstack.com/freesmtp.html Software Link:...

Free SMTP Server 2.5 Denial Of Service

Exploit Title: Free SMTP Server - Local Denial of Service Crash PoC Date: February 3, 2009 Exploit Author: Metin Kandemir kandemir Vendor Homepage: http://www.softstack.com/freesmtp.html Software Link: https://free-smtp-server.en.uptodown.com/windows/download Version: 2.5 Tested on: Windows 7...

Rockwell Automation CompactLogix 5370 Buffer Overflow Denial of Service (CVE-2019-10954)

A denial of service vulnerability exists in Rockwell Automation CompactLogix 5370 PLCs. A remote, unauthenticated attacker could send crafted SMTP configuration packets to cause denial of service conditions...

Easy WP SMTP v1. 3. 9）0 day vulnerability is being attacked in the process and reproducibility-vulnerability warning-the black bar safety net

Foreword Your own blog site with wordpres hosting, last month found some abnormalities. 3.12 days, the mailbox explosion, received more than 100 letter on the site is the blasting of the notification mail. ! Day to see also not strange, because before it appeared such a situation, every day there...