AIDA64 Business 5.99.4900 SEH Buffer Overflow

!/usr/bin/python Exploit Title: AIDA64 Business 5.99.4900 - SEH Buffer Overflow EggHunter Date: 2019-04-01 Vendor Homepage: https://www.aida64.com Software Link: https://www.aida64.com/downloads Mirror Link : https://www.softpedia.com/get/System/System-Info/AIDA64-Business-Edition.shtml Exploit...

AIDA64 Business 5.99.4900 - SEH Buffer Overflow (EggHunter)

!/usr/bin/python Exploit Title: AIDA64 Business 5.99.4900 - SEH Buffer Overflow EggHunter Date: 2019-04-01 Vendor Homepage: https://www.aida64.com Software Link: https://www.aida64.com/downloads Mirror Link : https://www.softpedia.com/get/System/System-Info/AIDA64-Business-Edition.shtml Exploit...

AIDA64 Extreme Edition 5.99.4800 - Local SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: AIDA64 Extreme 5.99.4800 - SEH Buffer Overflow EggHunter Vendor Homepage: https://www.aida64.com Software Link: http://download.aida64.com/aida64extreme599.exe Mirror Link :...

Ubiquiti Inc.: Catch mails sent to an SMTP Server over SSL using an Evil SMTP Server

A malicious actor setting up an SMTP proxy server between the UniFi Controller and their actual SMTP server can record their SMTP credentials for malicious use...

Design/Logic Flaw

The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection...

CVE-2017-18108

The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection...

CVE-2017-18108

CVE-2017-18108 affects Atlassian Crowd prior to version 2.10.2. The administration SMTP configuration resource contains a JNDI injection vulnerability that allows remote attackers with administration rights to execute arbitrary code. Impact: arbitrary code execution with admin privileges; CVSS3 b...

curl: libcurl: SMTP end-of-response out-of-bounds read - CVE-2019-3823

libcurl contains a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to smtpendofresp isn't NUL terminated and contains no character ending the parsed number, and len is set to 5, then the strtol call reads beyond the allocated buffer. The read conten...

WordPress Easy WP SMTP Plugin 1.3.9 RCE Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.142166";...

Tabs Laboratories MailCarrier MAIL FROM buffer overflow

Added: 03/25/2019 Background Tabs Laboratories MailCarrier is an SMTP server. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted MAIL FROM command to the SMTP service. Resolution Upgrade to a fixed version of...

Tabs Laboratories MailCarrier MAIL FROM buffer overflow

Added: 03/25/2019 Background Tabs Laboratories MailCarrier is an SMTP server. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted MAIL FROM command to the SMTP service. Resolution Upgrade to a fixed version of...

Tabs Laboratories MailCarrier MAIL FROM buffer overflow

Added: 03/25/2019 Background Tabs Laboratories MailCarrier is an SMTP server. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted MAIL FROM command to the SMTP service. Resolution Upgrade to a fixed version of...

MariaDB: smtp service vulnerable to POODLE SSLv3

One of our package servers had an old smtpd service linked with openssl 1.0.1i, which uses nondeterministic CBC padding, making it easy for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. The service has been disabled for the internet, as ...

WordPress Easy WP SMTP Plugin Arbitrary Option Update

An arbitrary file option update exists in WordPress Easy WP SMTP Plugin. Successful exploitation can lead to modification of any options of an affected site...

Easy WP SMTP Plugin for WordPress 1.3.9 Unauthenticated Remote Code Execution

The Easy WP SMTP Plugin for WordPress running on the remote web server is version 1.3.9. It is, therefore, affected by an unauthenticated remote code execution vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid123004; scriptversion"1.3";...

CVE-2019-9868

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator...

Default credentials

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator...

WordPress Easy WP SMTP plugin <= 1.3.9 - Unauthenticated arbitrary "wp_options" import vulnerability

Unauthenticated arbitrary "wpoptions" import vulnerability found Jerome Bruandet in WordPress Easy WP SMTP plugin versions = 1.3.9. Solution Update the WordPress Easy WP SMTP plugin to the latest available version at least 1.3.9.1...

CVE-2019-9868

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator...

CVE-2019-9868

Affected product: Veritas NetBackup Appliance Web Console (versions up to 3.1.2). Issue: SMTP password is disclosed to an administrator via the Web Console UI. Root cause details are not provided in the given documents. Impact: potential exposure of SMTP credentials to users with Web Console acce...