Totemomail SMTP Server Detection

Totemomail is a comprehensive email solution designed to address all aspects of digital communication security. !/usr/bin/env python3 -- coding: utf-8 -- """Totemomail is a comprehensive email solution designed to address all aspects of digital communication security.""" import socket from...

Totemomail Login Panel - Detect

Totemomail login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Totemomail login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Totemomail Login Panel - Detect', 'description':...

EUVD-2018-18313

Malware in sbrugna...

EUVD-2018-7389

Malware in sbrugna...

EUVD-2018-7390

Malware in sbrugna...

EUVD-2018-7387

Malware in sbrugna...

EUVD-2018-7388

Malware in sbrugna...

EUVD-2024-25231

Malicious code in bioql PyPI...

EUVD-2024-25230

Malicious code in bioql PyPI...

CVE-2024-28063

Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...

CVE-2024-28064

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations with displayLoginChunkedImages and write operations with storeLoginChunkedImages...

CVE-2024-28063

Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...

CVE-2024-28064

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations with displayLoginChunkedImages and write operations with storeLoginChunkedImages...

CVE-2024-28063

Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...

CVE-2024-28064

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations with displayLoginChunkedImages and write operations with storeLoginChunkedImages...

CVE-2024-28064

Kiteworks Totemomail versions 7.x and 8.x before 8.3.0 are vulnerable to a directory traversal vulnerability via the /responsiveUI/EnvelopeOpenServlet endpoint. The issue occurs specifically with the messageId parameter when using the displayLoginChunkedImages and storeLoginChunkedImages variable...

CVE-2024-28063

Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS...

CVE-2024-28063

Kiteworks Totemomail versions through 7.0.0 are vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists in the /responsiveUI/EnvelopeOpenServlet endpoint, specifically via the envelopeRecipient parameter, where improper neutralization of input during web page generatio...

CVE-2024-28064: Path Traversal: '/dir/../filename'

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations with displayLoginChunkedImages and write operations with storeLoginChunkedImages...

PT-2024-22245 · Kiteworks · Kiteworks Totemomail

Name of the Vulnerable Software and Affected Versions: Kiteworks Totemomail versions 7.x through 8.2.1 Description: The issue allows for directory traversal, enabling unauthenticated file read and delete operations, as well as write operations, through the /responsiveUI/EnvelopeOpenServlet...