5939 matches found
Non Compliant UUencoded SMTP
Unexpected characters in UUencoded SMTP data which cannot be decoded might indicate an attempt to attack the mail server...
CVE-2015-3141
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for requests that create an 1 SMTP domain or a 2 user via a request to /FrontController; or conduct cross-sit...
CVE-2015-3141
The CVE-2015-3141 entry affects Synametrics Xeams 4.5 Build 5755 and earlier, with CSRF vulnerabilities in /FrontController enabling an attacker to hijack administrator sessions via requests that create an SMTP domain or a user, and to trigger XSS via domainname, txtRecipient, and related paramet...
Syncrify Server <= 3.6 Build 833 - CSRF / XSS Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Multiple vulnerabilities in Syncrify Server 3.6 Build 833 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: email protected Vendor Homepage: http://www.synametrics.com Software Link:...
Syncrify Server 3.6 Build 833 CSRF / Cross Site Scripting
Exploit Title: Multiple vulnerabilities in Syncrify Server 3.6 Build 833 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/SyncrifyDownload.htm Version: 3.6...
Syncrify Server 3.6 Build 833 - Multiple Vulnerabilities
Exploit Title: Multiple vulnerabilities in Syncrify Server 3.6 Build 833 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/SyncrifyDownload.htm Version: 3.6...
Xeams 4.5 Build 5755 - Multiple Vulnerabilities
Exploit Title: Multiple vulnerabilities in Xeams 4.5 Build 5755 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/XeamsDownload.htm Version: 4.5 Build 5755...
Fortinet FortiMail Server Detection via SMTP
Binary data 8731.prm...
Net-creds - Sniff passwords and hashes from an interface or pcap file
Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. Sniffs URLs visited POST loads sent HTTP form logins/passwords HTTP basic auth logins/passwords HTTP searches FTP logins/passwords IRC...
Coin.Space: SMTP protection not used
Hi I'm checking your website found spf record there. You should apply strict SMPT policy to stop spoofed email sending from your domain. An attacker would send a Fake email from [email protected] saying that Please change your password, The victim is aware of phishing attacks, But when he sees...
Send-Only Postfix Server
Postfix is an MTA Mail Transfer Agent, an application used to send and receive email. In this tutorial, we will install and configure Postfix so that it can be used to send emails by local applications only. Why would you want to do that? If you’re already using a third-party email provider for...
AfterLogic WebMail Lite Authentication Bypass
AfterLogic WebMail Lite is a free web-based IMAP and SMTP email-client with Ajax interface. AfterLogic WebMail Lite is available for both PHP and ASP.NET platforms. The version of AfterLogic WebMail Lite that is written in PHP is free and open-source software subject to the terms of the Affero...
Sniff Sensitive Data From Interface or pcap: net-creds
Thoroughly sniff passwords and hashes from an interface or pcap file. Concatenates fragmented packets and does not rely on ports for service identification. Sniffs URLs visited POST loads sent HTTP form logins/passwords HTTP basic auth logins/passwords HTTP searches FTP logins/passwords IRC...
IT-Grundschutz M5.019: Einsatz der Sicherheitsmechanismen von sendmail
IT-Grundschutz M5.019: Einsatz der Sicherheitsmechanismen von sendmail. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM5019.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 5.019 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone...
The Ghost vulnerability the GHOST remote using the EXP-bug warning-the black bar safety net
This article demonstrates one of the Ghost vulnerability the GHOST of EXP, this EXP is Metasploit a module. This Metasploit module can be remote exploit CVE-2 0 1 5-0 2 3 5 out of glibc library gethostbyname function heap overflow vulnerability vulnerability, the goal is to run the Exim mail...
Exim GHOST (glibc gethostbyname) Buffer Overflow Exploit
Exploit for linux platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Exim GHOST glibc gethostbyname Buffer Overflow', 'Description' = %q This modu...
Exim - 'GHOST' glibc gethostbyname Buffer Overflow (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Exim GHOST glibc gethostbyname Buffer Overflow', 'Description' = %q This module remotely exploits CVE-2015-0235 a.k.a. GHOST, a...
Exim - GHOST glibc gethostbyname Buffer Overflow (Metasploit)
Exim - GHOST glibc gethostbyname Buffer Overflow Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Exim GHOST glibc gethostbyname Buffer Overflow', 'Description' = %q This...
SuSE 11.3 Security Update : wireshark (SAT Patch Number 10279)
wireshark has been updated to version 1.10.12 to fix six security issues : - The WCCP dissector could crash. bnc912365. CVE-2015-0559 / CVE-2015-0560 - The LPP dissector could crash. bnc912368. CVE-2015-0561 - The DEC DNA Routing Protocol dissector could crash. bnc912369. CVE-2015-0562 - The SMTP...