jetlib.sec » Tags » mail

Feeds

133363 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

112 items tagged "mail"

Related tags: txt [+], windows [+], microsoft [+], server [+], html [+], thunderbird [+], remote [+], red hat security [+], mozilla thunderbird [+], cyrus imapd [+], and [+], smtp [+], outlook [+], mail server [+], integer overflow vulnerability [+], sql injection [+], security [+], safer use [+], php [+], pam pam [+], pam [+], multi [+], mini [+], mhonarc [+], mail directory [+], mail conversion [+], linux pam [+], html mail [+], env [+], dashboard widget [+], cross site scripting [+], yahoo [+], verification tool [+], verification [+], valid authentication [+], tool [+], theo de raadt [+], testing [+], sticky [+], squirrelmail [+], site [+], scalable mail [+], proventia [+], privilege escalation vulnerability [+], performance mail [+], outlook express [+], openbsd [+], multiple [+], mail security [+], mail messages [+], mail headers [+], mail form [+], mail delivery program [+], local privilege escalation [+], linux security [+], ipsec [+], information disclosure vulnerability [+], information disclosure [+], imap [+], icewarp [+], ibm [+], html mail message [+], forgery [+], fetch [+], external entity [+], exim [+], e mail [+], delivery [+], debian [+], cross [+], content [+], coffeecup [+], bugtraq [+], backdoored [+], authentication [+], BackTrack [+], webapps [+], vlc [+], vendor [+], tutti [+], thunderbird mail [+], target [+], shell [+], rubygems [+], quot [+], package [+], news [+], mora tags [+], mail client [+], information [+], hat europe [+], hacks [+], gmail [+], form [+], feature [+], europe [+], error [+], dsa [+], direct object [+], day [+], command execution [+], client [+], classifieds [+], bt4 [+], black hat [+], Requests [+], vulnerability [+], xss [+], wireless video transmitter [+], wireless doorbell [+], wire fraud [+], windows phone [+], video [+], u mail [+], tweak [+], thomas renck [+], tax [+], sslstrip [+], spread [+], spoofing [+], spear [+], space [+], solo [+], snail mail [+], snail [+], smacks [+], simple [+], shell command [+], server smtp [+], sendmail [+], send [+], security advisory [+], secunia [+], sean [+], rustock [+], ruby [+], rlo [+], retired [+], reindirizzamento [+], race [+], pycode [+], pro v2 [+], priority mail [+], priority [+], postal inspectors [+], postal [+], plane [+], php pear [+], phishing [+], paper [+], pagina di login [+], own mail [+], outlook express microsoft [+], news international [+], multiple file [+], module [+], mime [+], microsoft outlook express [+], mdvsa [+], mail package [+], mail notification [+], mail box [+], login [+], junk mail [+], junk [+], javascript links [+], international mail [+], international [+], integer overflow [+], insert [+], indicted [+], inclusion [+], imap connections [+], icblogger [+], home [+], hackers [+], hacker [+], hack attack [+], hack [+], guardian [+], growling [+], google [+], gathering [+], file upload [+], file [+], feds [+], fake mail [+], fake [+], e mail addresses [+], e mail address [+], drop [+], doorbell [+], dll [+], disclosure [+], directory traversal [+], directory [+], digital postage meters [+], dei [+], data thieves [+], data [+], daily mail [+], daily [+], cyber security alert [+], cve [+], corporate desktop [+], conspiracy [+], comunicazioni [+], communicrypt [+], comingchina [+], com [+], ciao a tutti [+], che [+], cerco [+], botnet [+], blames [+], big [+], auto insert [+], auto [+], attacker [+], attack [+], attachments [+], arduino [+], arbitrary code execution [+], apple [+], app [+], advisory [+], addresses [+], address [+], access point [+], Supporto [+], Software [+], Newbie [+], Generali [+], Discussioni [+], Angolo [+]

• May 21, 2012
• 0:00

  Vuln: RubyGems mail Directory Traversal and Command Injection Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  RubyGems mail Directory Traversal and Command Injection Vulnerabilities

  Tags:  directory rubygems mail directory-traversal mail-directory  

• April 25, 2012
• 19:33

  Secunia Security Advisory 48970

   » ‎ Packet Storm Security Advisories
  Secunia Security Advisory - Some vulnerabilities have been reported in the Mail gem for Ruby, which can be exploited by malicious people to manipulate certain data and compromise a vulnerable system.

  Tags:  advisory secunia security ruby security-advisory mail  

• April 03, 2012
• 17:27

  Ubuntu Security Notice USN-1400-4

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1400-4 - USN-1400-3 fixed vulnerabilities in Thunderbird. The new Thunderbird version caused a regression in IMAP connections and mail filtering. This update fixes the problem. Soroush Dalili discovered that Firefox did not adequately protect against dropping JavaScript links onto a frame. Atte Kettunen discovered a use-after-free vulnerability in Firefox's handling of SVG animations. Various other issues were also addressed.

  Tags:  imap-connections javascript-links mail  

• February 29, 2012
• 19:06

  CoffeeCup Mail Testing Authentication Bypass

   » ‎ Packet Storm Security Exploits
  CoffeeCup Mail Testing suffers from an authentication bypass vulnerability.

  Tags:  mail testing coffeecup authentication  

• 19:06

  CoffeeCup Mail Testing Authentication Bypass

   » ‎ Packet Storm Security Recent Files
  CoffeeCup Mail Testing suffers from an authentication bypass vulnerability.

  Tags:  mail testing coffeecup authentication  

• 19:06

  CoffeeCup Mail Testing Authentication Bypass

   » ‎ Packet Storm Security Misc. Files
  CoffeeCup Mail Testing suffers from an authentication bypass vulnerability.

  Tags:  mail testing coffeecup authentication  

• February 06, 2012
• 8:53

  Hackers Hit The Daily Mail

   » ‎ Packet Storm Security Headlines
  Hackers Hit The Daily Mail

  Tags:  hackers mail daily daily-mail  

• January 10, 2012
• 7:00

  Bugtraq: Re: Simple Mail Server - SMTP Authentication Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Re: Simple Mail Server - SMTP Authentication Bypass Vulnerability

  Tags:  server mail simple mail-server server-smtp vulnerability  

• January 06, 2012
• 6:01

  OK, you might not be paranoid – perhaps that priority mail box IS spying on you

   » ‎ Hack a Day
  [Thomas Renck] recently picked up a 1000mW wireless video transmitter that he ultimately planned to mount in an RC plane. Before he strapped it on a plane to potentially kiss it goodbye for good, he wanted to play with it a while to see what it was capable of. After a friend helped him determine [...]

  Tags:  priority plane mail thomas-renck wireless-video-transmitter priority-mail mail-box news  

• January 02, 2012
• 13:43

  Debian Security Advisory 2377-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2377-1 - It was discovered that cyrus-imapd, a highly scalable mail system designed for use in enterprise environments, is not properly parsing mail headers when a client makes use of the IMAP threading feature. As a result, a NULL pointer is dereferenced which crashes the daemon. An attacker can trigger this by sending a mail containing crafted reference headers and access the mail with a client that uses the server threading feature of IMAP.

  Tags:  debian security mail scalable-mail cyrus-imapd mail-headers  

• 13:43

  Debian Security Advisory 2377-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2377-1 - It was discovered that cyrus-imapd, a highly scalable mail system designed for use in enterprise environments, is not properly parsing mail headers when a client makes use of the IMAP threading feature. As a result, a NULL pointer is dereferenced which crashes the daemon. An attacker can trigger this by sending a mail containing crafted reference headers and access the mail with a client that uses the server threading feature of IMAP.

  Tags:  debian security mail scalable-mail cyrus-imapd mail-headers  

• 13:43

  Debian Security Advisory 2377-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2377-1 - It was discovered that cyrus-imapd, a highly scalable mail system designed for use in enterprise environments, is not properly parsing mail headers when a client makes use of the IMAP threading feature. As a result, a NULL pointer is dereferenced which crashes the daemon. An attacker can trigger this by sending a mail containing crafted reference headers and access the mail with a client that uses the server threading feature of IMAP.

  Tags:  debian security mail scalable-mail cyrus-imapd mail-headers  

• December 04, 2011
• 14:31

  Yahoo! Mail Cross Site Request Forgery

   » ‎ Packet Storm Security Exploits
  Yahoo! Mail suffered from a delete contact cross site request forgery vulnerability. This has been fixed.

  Tags:  cross mail site forgery vulnerability  

• 14:31

  Yahoo! Mail Cross Site Request Forgery

   » ‎ Packet Storm Security Recent Files
  Yahoo! Mail suffered from a delete contact cross site request forgery vulnerability. This has been fixed.

  Tags:  cross mail site forgery vulnerability  

• 14:31

  Yahoo! Mail Cross Site Request Forgery

   » ‎ Packet Storm Security Misc. Files
  Yahoo! Mail suffered from a delete contact cross site request forgery vulnerability. This has been fixed.

  Tags:  cross mail site forgery vulnerability  

• December 01, 2011
• 13:35

  Red Hat Security Advisory 2011-1508-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2011-1508-01 - The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support. An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially-crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature.

  Tags:  server imap mail cyrus-imapd performance-mail valid-authentication  

• 13:35

  Red Hat Security Advisory 2011-1508-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2011-1508-01 - The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support. An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially-crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature.

  Tags:  server imap mail cyrus-imapd performance-mail valid-authentication  

• 13:35

  Red Hat Security Advisory 2011-1508-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2011-1508-01 - The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support. An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially-crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature.

  Tags:  server imap mail cyrus-imapd performance-mail valid-authentication  

• November 22, 2011
• 16:58

  Google Mail Crypto Tweak Makes Eavesdropping Harder

   » ‎ Packet Storm Security Headlines
  Google Mail Crypto Tweak Makes Eavesdropping Harder

  Tags:  tweak google mail  

• November 16, 2011
• 0:00

  Vuln: Windows Mail and Windows Meeting Space DLL Loading Arbitrary Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Windows Mail and Windows Meeting Space DLL Loading Arbitrary Code Execution Vulnerability

  Tags:  space mail windows arbitrary-code-execution vulnerability  

• November 08, 2011
• 16:56

  Red Hat Security Advisory 2011-1438-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2011-1438-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. A cross-site scripting flaw was found in the way Thunderbird handled certain multibyte character sets. Malicious, remote content could cause Thunderbird to run JavaScript code with the permissions of different remote content. Note: This issue cannot be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. It could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed.

  Tags:  thunderbird mail content mozilla-thunderbird red-hat-security mail-messages  

• 16:56

  Red Hat Security Advisory 2011-1438-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2011-1438-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. A cross-site scripting flaw was found in the way Thunderbird handled certain multibyte character sets. Malicious, remote content could cause Thunderbird to run JavaScript code with the permissions of different remote content. Note: This issue cannot be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. It could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed.

  Tags:  thunderbird mail content mozilla-thunderbird red-hat-security mail-messages  

• 16:56

  Red Hat Security Advisory 2011-1438-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2011-1438-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. A cross-site scripting flaw was found in the way Thunderbird handled certain multibyte character sets. Malicious, remote content could cause Thunderbird to run JavaScript code with the permissions of different remote content. Note: This issue cannot be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. It could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed.

  Tags:  thunderbird mail content mozilla-thunderbird red-hat-security mail-messages  

• October 31, 2011
• 8:00

  Bugtraq: Apple's Mail.app mail of death

   » ‎ SecurityFocus Vulnerabilities
  Apple's Mail.app mail of death

  Tags:  mail apple app bugtraq  

• September 29, 2011
• 14:32

  Red Hat Security Advisory 2011-1342-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2011-1342-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. A flaw was found in the way Thunderbird processed the "Enter" keypress event. A malicious HTML mail message could present a download dialog while the key is pressed, activating the default "Open" action. A remote attacker could exploit this vulnerability by causing the mail client to open malicious web content.

  Tags:  html thunderbird mail html-mail-message mozilla-thunderbird red-hat-security  

• 14:32

  Red Hat Security Advisory 2011-1342-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2011-1342-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. A flaw was found in the way Thunderbird processed the "Enter" keypress event. A malicious HTML mail message could present a download dialog while the key is pressed, activating the default "Open" action. A remote attacker could exploit this vulnerability by causing the mail client to open malicious web content.

  Tags:  html thunderbird mail html-mail-message mozilla-thunderbird red-hat-security  

• 14:32

  Red Hat Security Advisory 2011-1342-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2011-1342-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. A flaw was found in the way Thunderbird processed the "Enter" keypress event. A malicious HTML mail message could present a download dialog while the key is pressed, activating the default "Open" action. A remote attacker could exploit this vulnerability by causing the mail client to open malicious web content.

  Tags:  html thunderbird mail html-mail-message mozilla-thunderbird red-hat-security  

• September 23, 2011
• 12:22

  IceWarp Mail Server Injection / Information Disclosure

   » ‎ Packet Storm Security Exploits
  IceWarp Mail Server versions 10.3.2 and below suffer from XML external entity injection and PHP information disclosure vulnerabilities.

  Tags:  server mail icewarp mail-server information-disclosure external-entity  

• 12:22

  IceWarp Mail Server Injection / Information Disclosure

   » ‎ Packet Storm Security Recent Files
  IceWarp Mail Server versions 10.3.2 and below suffer from XML external entity injection and PHP information disclosure vulnerabilities.

  Tags:  server mail icewarp mail-server information-disclosure external-entity  

• 12:22

  IceWarp Mail Server Injection / Information Disclosure

   » ‎ Packet Storm Security Misc. Files
  IceWarp Mail Server versions 10.3.2 and below suffer from XML external entity injection and PHP information disclosure vulnerabilities.

  Tags:  server mail icewarp mail-server information-disclosure external-entity  

• September 19, 2011
• 16:52

  WordPress Mini Mail Dashboard Widget 1.36 Remote File Inclusion

   » ‎ Packet Storm Security Exploits
  WordPress Mini Mail Dashboard Widget plugin version 1.36 suffers from a remote file inclusion vulnerability.

  Tags:  mini remote mail dashboard-widget vulnerability  

• 16:52

  WordPress Mini Mail Dashboard Widget 1.36 Remote File Inclusion

   » ‎ Packet Storm Security Recent Files
  WordPress Mini Mail Dashboard Widget plugin version 1.36 suffers from a remote file inclusion vulnerability.

  Tags:  mini remote mail dashboard-widget vulnerability  

• 16:52

  WordPress Mini Mail Dashboard Widget 1.36 Remote File Inclusion

   » ‎ Packet Storm Security Misc. Files
  WordPress Mini Mail Dashboard Widget plugin version 1.36 suffers from a remote file inclusion vulnerability.

  Tags:  mini remote mail dashboard-widget vulnerability  

• September 18, 2011
• 21:00

  [webapps / 0day] - Wordpress Mini Mail Dashboard Widget Plugin 1.36 Remote File Inclusion

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Wordpress Mini Mail Dashboard Widget Plugin 1.36 Remote File Inclusion

  Tags:  mini day webapps dashboard-widget mail inclusion  

• August 16, 2011
• 20:33

  News International Mail Server Password FAIL Exposed

   » ‎ Packet Storm Security Headlines
  News International Mail Server Password FAIL Exposed

  Tags:  international mail news international-mail mail-server news-international  

• August 04, 2011
• 0:00

  Vuln: Drupal Mail Logger Module Multiple HTML Injection Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Drupal Mail Logger Module Multiple HTML Injection Vulnerabilities

  Tags:  multiple module mail  

• July 17, 2011
• 2:34

  [Paper] SMTP Information Gathering

   » ‎ SecDocs
  Authors: Lluis Mora
  Tags: mail
  Event: Black Hat Europe 2007
  

  Tags:  smtp information paper mora-tags europe hat-europe mail black-hat  

• 2:33

  [Slides] SMTP Information Gathering

   » ‎ SecDocs
  Authors: Lluis Mora
  Tags: mail
  Event: Black Hat Europe 2007
  

  Tags:  gathering smtp information mora-tags europe hat-europe mail black-hat  

• June 04, 2011
• 9:17

  Spear Phishing Attacks Spread To Hotmail And Yahoo Mail

   » ‎ Packet Storm Security Headlines
  Spear Phishing Attacks Spread To Hotmail And Yahoo Mail

  Tags:  spread spear phishing mail  

• May 24, 2011
• 12:01

  Bugtraq: E-mail address spoofing with RLO

   » ‎ SecurityFocus Vulnerabilities
  E-mail address spoofing with RLO

  Tags:  rlo address mail e-mail-address spoofing bugtraq  

• April 13, 2011
• 6:56

  Data Thieves Target E-mail Addresses

   » ‎ Packet Storm Security Headlines
  Data Thieves Target E-mail Addresses

  Tags:  target mail data e-mail-addresses data-thieves  

• April 12, 2011
• 0:00

  Vuln: Exim Sticky Mail Directory Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Exim Sticky Mail Directory Local Privilege Escalation Vulnerability

  Tags:  mail exim sticky privilege-escalation-vulnerability mail-directory local-privilege-escalation  

• April 09, 2011
• 10:30

  Growling doorbell lets you know guests have arrived

   » ‎ Hack a Day
  [Sean] was screwing around online looking for nothing in particular when he came across a mailbox hacked to notify the homeowner when the mail had been delivered. Since his mail is delivered via a slot in the door, he had no use for the hack as is, but something similar soon came to mind. His [...]

  Tags:  growling doorbell mail sean hack arduino hacks  

• April 07, 2011
• 6:29

  Target's E-mail Addresses Stolen, Too

   » ‎ Packet Storm Security Headlines
  Target's E-mail Addresses Stolen, Too

  Tags:  mail addresses target e-mail  

• March 30, 2011
• 0:00

  Vuln: Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

  Tags:  and pam env pam-pam linux-pam mail  

• March 29, 2011
• 15:08

  Junk Mail Down 1/3 Since Rustock Botnet Takedown

   » ‎ Packet Storm Security Headlines
  Junk Mail Down 1/3 Since Rustock Botnet Takedown

  Tags:  junk mail rustock junk-mail botnet  

• March 24, 2011
• 0:00

  Vuln: MHonArc HTML Mail Conversion Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MHonArc HTML Mail Conversion Cross Site Scripting Vulnerability

  Tags:  mail html mhonarc mail-conversion html-mail cross-site-scripting  

• March 08, 2011
• 0:00

  Vuln: Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

  Tags:  and pam env pam-pam linux-pam mail  

• March 07, 2011
• 1:09

  SMTP Verification Tool

   » ‎ Packet Storm Security Recent Files
  This script is a simple SMTP verification tool to send mail.

  Tags:  verification tool smtp verification-tool mail  

• 1:09

  SMTP Verification Tool

   » ‎ Packet Storm Security Tools
  This script is a simple SMTP verification tool to send mail.

  Tags:  verification tool smtp verification-tool mail  

• 1:09

  SMTP Verification Tool

   » ‎ Packet Storm Security Misc. Files
  This script is a simple SMTP verification tool to send mail.

  Tags:  verification tool smtp verification-tool mail  

• February 10, 2011
• 0:00

  Vuln: Exim Sticky Mail Directory Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Exim Sticky Mail Directory Local Privilege Escalation Vulnerability

  Tags:  mail exim sticky privilege-escalation-vulnerability mail-directory local-privilege-escalation  

• February 01, 2011
• 7:58

  Microsoft Blames Yahoo Mail For Windows Phone 7 Data Leak

   » ‎ Packet Storm Security Headlines
  Microsoft Blames Yahoo Mail For Windows Phone 7 Data Leak

  Tags:  yahoo microsoft blames windows-phone mail  

• January 30, 2011
• 9:00

  Snail mail notification system

   » ‎ Hack a Day
  [Mime] lives on one of the upper levels of an apartment complex. The mailboxes, being located at the ground floor can be somewhat inconvenient to check regularly. [Mime] decided to rig up a device to let him know when his mailbox had been accessed. He started with a wireless doorbell, thinking he could use the [...]

  Tags:  mime snail mail wireless-doorbell mail-notification snail-mail home hacks  

• January 26, 2011
• 9:47

  Hack Attack Smacks Mail And Guardian Online

   » ‎ Packet Storm Security Headlines
  Hack Attack Smacks Mail And Guardian Online

  Tags:  mail smacks attack hack-attack guardian  

• 0:00

  Vuln: RubyGems mail Remote Arbitrary Shell Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RubyGems mail Remote Arbitrary Shell Command Injection Vulnerability

  Tags:  rubygems remote mail shell-command vulnerability  

• January 11, 2011
• 0:00

  Vuln: ComingChina.com U-Mail 'edit.php' Arbitrary File Upload Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ComingChina.com U-Mail 'edit.php' Arbitrary File Upload Vulnerability

  Tags:  u-mail comingchina com file-upload vulnerability mail  

• January 10, 2011
• 0:00

  Vuln: MHonArc HTML Mail Conversion Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MHonArc HTML Mail Conversion Cross Site Scripting Vulnerability

  Tags:  mail html mhonarc mail-conversion html-mail cross-site-scripting  

• December 30, 2010
• 0:00

  Vuln: MHonArc HTML Mail Conversion Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MHonArc HTML Mail Conversion Cross Site Scripting Vulnerability

  Tags:  mail html mhonarc mail-conversion html-mail cross-site-scripting  

• December 21, 2010
• 0:00

  Vuln: MHonArc HTML Mail Conversion Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MHonArc HTML Mail Conversion Cross Site Scripting Vulnerability

  Tags:  mail html mhonarc mail-conversion html-mail cross-site-scripting  

• December 17, 2010
• 0:00

  Vuln: Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

  Tags:  and pam env pam-pam linux-pam mail  

• December 14, 2010
• 14:24

  OpenBSD IPSEC Backdoored

   » ‎ Packet Storm Security Advisories
  Theo de Raadt has received a mail stating that the IPSEC stack in OpenBSD may have been backdoored since the year 2000 thanks to the FBI.

  Tags:  ipsec openbsd backdoored theo-de-raadt mail  

• 14:24

  OpenBSD IPSEC Backdoored

   » ‎ Packet Storm Security Recent Files
  Theo de Raadt has received a mail stating that the IPSEC stack in OpenBSD may have been backdoored since the year 2000 thanks to the FBI.

  Tags:  ipsec openbsd backdoored theo-de-raadt mail  

• 14:24

  OpenBSD IPSEC Backdoored

   » ‎ Packet Storm Security Misc. Files
  Theo de Raadt has received a mail stating that the IPSEC stack in OpenBSD may have been backdoored since the year 2000 thanks to the FBI.

  Tags:  ipsec openbsd backdoored theo-de-raadt mail  

• November 18, 2010
• 0:00

  [Video] Postal Experiments

   » ‎ SecDocs
  Tags: postal
  Event: PhreakNIC 11
  Abstract: A review of the USPS entrails explained with strange things sent through the mail. What is the heaviest thing that you can send in a flat rate box? What happens if you mail a sphere? How do digital postage meters work? How modern automation allows you to send a letter 3000 miles for only 41 cents and what security vulnerabilities might exist in that infrastructure. How to postmark your own mail, how the new "PLANET" barcode will track all mail in the future. 100% legal, but sure to make the mailman wonder. Postal inspectors welcome.

  Tags:  video postal mail digital-postage-meters own-mail postal-inspectors  

• November 08, 2010
• 0:00

  Vuln: Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Linux-PAM 'pam_env' and 'pam_mail' Modules Multiple Vulnerabilities

  Tags:  and pam env pam-pam linux-pam mail  

• October 28, 2010
• 12:19

  IBM Proventia Mail Security System Insecure Direct Object Reference Vulnerability

   » ‎ SecuriTeam
  An Insecure Direct Object Reference vulnerability was discovered in IBM Proventia Mail Security System.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  mail proventia ibm mail-security direct-object  

• October 15, 2010
• 14:00

  [webapps / 0day] - icblogger full-(tr) (mail.mdb) Database Disclosure Exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - icblogger full-(tr) (mail.mdb) Database Disclosure Exploit

  Tags:  day icblogger webapps disclosure mail  

• September 13, 2010
• 9:00

  Bugtraq: MVSA-10-007 / CVE-2010-0152 - IBM Proventia Mail Security System - Multiple persistent and reflected XSS vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  MVSA-10-007 / CVE-2010-0152 - IBM Proventia Mail Security System - Multiple persistent and reflected XSS vulnerabilities

  Tags:  mail proventia ibm mail-security cve  

• 9:00

  Bugtraq: MVSA-10-008 / CVE-2010-0154 - IBM Proventia Mail Security System - Insecure Direct Object Reference vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MVSA-10-008 / CVE-2010-0154 - IBM Proventia Mail Security System - Insecure Direct Object Reference vulnerability

  Tags:  mail proventia ibm mail-security direct-object  

• September 07, 2010
• 0:00

  Vuln: Mundi Mail Multiple Remote Command Execution Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Mundi Mail Multiple Remote Command Execution Vulnerabilities

  Tags:  multiple remote mail command-execution  

• July 29, 2010
• 0:00

  Vuln: Mundi Mail Multiple Remote Command Execution Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Mundi Mail Multiple Remote Command Execution Vulnerabilities

  Tags:  multiple remote mail command-execution  

• July 01, 2010
• 16:59

  Microsoft Windows Outlook Express and Windows Mail Integer Overflow Vulnerability

   » ‎ SecuriTeam
  An integer overflow vulnerability was discovered in Microsoft Windows Outlook Express and Windows Mail.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  microsoft outlook windows integer-overflow-vulnerability safer-use mail  

• 13:57

  Microsoft Windows Outlook Express and Windows Mail Integer Overflow Vulnerability

   » ‎ SecuriTeam
  An integer overflow vulnerability was discovered in Microsoft Windows Outlook Express and Windows Mail.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  microsoft outlook windows integer-overflow-vulnerability safer-use mail  

• 12:56

  Microsoft Windows Outlook Express and Windows Mail Integer Overflow Vulnerability

   » ‎ SecuriTeam
  An integer overflow vulnerability was discovered in Microsoft Windows Outlook Express and Windows Mail.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  microsoft outlook windows integer-overflow-vulnerability safer-use mail  

• June 22, 2010
• 0:00

  Vuln: SquirrelMail 'mail_fetch' Remote Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  SquirrelMail 'mail_fetch' Remote Information Disclosure Vulnerability

  Tags:  squirrelmail fetch mail information-disclosure-vulnerability  

• June 21, 2010
• 0:00

  Vuln: SquirrelMail 'mail_fetch' Remote Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  SquirrelMail 'mail_fetch' Remote Information Disclosure Vulnerability

  Tags:  squirrelmail fetch mail information-disclosure-vulnerability  

• June 15, 2010
• 20:00

  yahoomail-xss.txt

   » ‎ Packet Storm Security Exploits
  Yahoo! Mail suffered from a cross site scripting vulnerability.

  Tags:  txt mail yahoo xss vulnerability  

• June 08, 2010
• 0:00

  Vuln: Exim Sticky Mail Directory Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Exim Sticky Mail Directory Local Privilege Escalation Vulnerability

  Tags:  mail exim sticky privilege-escalation-vulnerability mail-directory local-privilege-escalation  

• May 31, 2010
• 17:12

  Deliver Mail Delivery Multiple Race Condition Vulnerabilities

   » ‎ SecuriTeam
  Deliver, a mail delivery program installed suid root as /usr/bin/deliver, is vulnerable to several race conditions that can be exploited by a local attacker using symbolic links.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  mail race delivery mail-delivery-program safer-use attacker  

• May 26, 2010
• 18:01

  multivendormail-sql.txt

   » ‎ Packet Storm Security Recent Files
  Multi Vendor Mail suffers from a remote SQL injection vulnerability.

  Tags:  txt vendor multi sql-injection mail vulnerability  

• 18:01

  mvm-sql.txt

   » ‎ Packet Storm Security Recent Files
  Multi Vendor Mail suffers from a remote SQL injection vulnerability in itemdetail.php and shop.php.

  Tags:  txt php multi sql-injection mail vulnerability  

• 18:00

  multivendormail-sql.txt

   » ‎ Packet Storm Security Exploits
  Multi Vendor Mail suffers from a remote SQL injection vulnerability.

  Tags:  txt vendor multi sql-injection mail vulnerability  

• 18:00

  mvm-sql.txt

   » ‎ Packet Storm Security Exploits
  Multi Vendor Mail suffers from a remote SQL injection vulnerability in itemdetail.php and shop.php.

  Tags:  txt php multi sql-injection mail vulnerability  

• May 21, 2010
• 0:00

  Vuln: SquirrelMail 'mail_fetch' Remote Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  SquirrelMail 'mail_fetch' Remote Information Disclosure Vulnerability

  Tags:  squirrelmail fetch mail information-disclosure-vulnerability  

• May 19, 2010
• 1:00

  CommuniCrypt Mail 1.16 (ANSMTP.dll/AOSMTP.dll) ActiveX

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  CommuniCrypt Mail 1.16 (ANSMTP.dll/AOSMTP.dll) ActiveX

  Tags:  mail communicrypt dll  

• May 11, 2010
• 20:34

  TA10-131A.txt

   » ‎ Packet Storm Security Advisories
  Technical Cyber Security Alert 2010-131A - Microsoft has released updates to address vulnerabilities in Microsoft Outlook Express, Microsoft Windows Mail, Microsoft Windows Live Mail, Microsoft Office, and Microsoft Visual Basic for Applications.

  Tags:  mail microsoft windows microsoft-outlook-express outlook-express-microsoft cyber-security-alert  

• 1:00

  Microsoft Windows Outlook Express and Windows Mail Integer Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Microsoft Windows Outlook Express and Windows Mail Integer Overflow

  Tags:  microsoft outlook windows integer-overflow outlook-express mail  

• 0:00

  Vuln: Microsoft Windows Outlook Express and Windows Mail Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Windows Outlook Express and Windows Mail Integer Overflow Vulnerability

  Tags:  microsoft outlook windows integer-overflow-vulnerability outlook-express mail  

• 0:00

  Vuln: RETIRED: Microsoft Windows Outlook Express and Windows Mail Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RETIRED: Microsoft Windows Outlook Express and Windows Mail Integer Overflow Vulnerability

  Tags:  microsoft retired windows integer-overflow-vulnerability outlook-express mail  

• April 25, 2010
• 1:00

  PHP Classifieds V6.09 E-mail Dump Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  PHP Classifieds V6.09 E-mail Dump Vulnerability

  Tags:  classifieds php mail vulnerability e-mail  

• April 17, 2010
• 0:00

  Feds Drop Big For Warrantless Access To Yahoo! Mail

   » ‎ Packet Storm Security Headlines
  Feds Drop Big For Warrantless Access To Yahoo! Mail

  Tags:  big drop feds mail yahoo  

• April 15, 2010
• 0:00

  Hacker Indicted In Tax, Mail, Wire Fraud Conspiracy

   » ‎ Packet Storm Security Headlines
  Hacker Indicted In Tax, Mail, Wire Fraud Conspiracy

  Tags:  hacker indicted tax wire-fraud mail conspiracy  

• March 31, 2010
• 21:00

  dsa-2025-1.txt

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2025-1 - Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client.

  Tags:  dsa client mail thunderbird-mail mail-client linux-security  

• 21:00

  dsa-2025-1.txt

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2025-1 - Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client.

  Tags:  dsa client mail thunderbird-mail mail-client linux-security  

• March 30, 2010
• 1:00

  PHP Classifieds V6.09 E-mail Dump Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  PHP Classifieds V6.09 E-mail Dump Vulnerability

  Tags:  classifieds php mail vulnerability e-mail  

• March 25, 2010
• 1:37

  deliver-race.txt

   » ‎ Packet Storm Security Recent Files
  The Deliver mail delivery program suffers from several race condition vulnerabilities.

  Tags:  txt delivery mail mail-delivery-program  

• 1:37

  deliver-race.txt

   » ‎ Packet Storm Security Advisories
  The Deliver mail delivery program suffers from several race condition vulnerabilities.

  Tags:  txt delivery mail mail-delivery-program  

• March 01, 2010
• 6:00

  Mail PassView 1.55

   » ‎ darkc0de
  Mail PassView 1.55

  Tags:  mail  

• February 25, 2010
• 17:00

  Us Mail Pass

   » ‎ darkc0de
  Us Mail Pass

  Tags:  mail  

• 13:00

  Pycode auto insert mail into newsletter

   » ‎ darkc0de
  Pycode auto insert mail into newsletter

  Tags:  insert auto pycode auto-insert mail  

• February 16, 2010
• 21:00

  Multiple File Attachments Mail Form Pro v2 - WebShell upload

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Multiple File Attachments Mail Form Pro v2 - WebShell upload

  Tags:  mail attachments file mail-form multiple-file pro-v2  

• 15:00

  mailformpro-shell.txt

   » ‎ Packet Storm Security Recent Files
  Mail Form Pro version 2 suffers from a shell upload vulnerability.

  Tags:  txt mail form mail-form vulnerability shell  

• 15:00

  mailformpro-shell.txt

   » ‎ Packet Storm Security Exploits
  Mail Form Pro version 2 suffers from a shell upload vulnerability.

  Tags:  txt mail form mail-form vulnerability shell  

• February 01, 2010
• 10:07

  Sniffing mail e reindirizzamento?

   » ‎ remote-exploit & backtrack
  Salve a tutti... io cercavo una guida o qualcuno che mi potesse da un dritta per il mio problema.
  Io sto cercando di riprodurre questo sistema: un Fake Access point che sniffa da un'ignara vittima delle comunicazioni via mail.
  Fino a qui con BT4 e ettercap sono riuscito a riprodurre le mie intenzioni.
  Il problema dove mi sono bloccato è il reindirizzamento della mail intercettata e un'eventuale modifica del testo.
  Qualcuno saprebbe dirmi quale tool è in grado di fare questo? e se esite qualche guida in merito?
  
  
  Grazie a tutti
  Ciao

  Tags:  tutti reindirizzamento mail comunicazioni access-point Discussioni Generali  

• January 30, 2010
• 8:44

  How this works

   » ‎ remote-exploit & backtrack
  Hello experts, I'm using BT4 in my usb for portable purpose.
  
  On the run,, i would like to view movies.
  
  So, i encouraged to install VLC
  
  apt-get vlc
  
  But, i find error, while unpacking deb.
  
  Could you tell me,
  
  1.after typing the command "apt-get vlc"
  
  were the downloaded items get stored.
  
  2.How to overcome the error.
  
  mail me if you have more details share.
  
  with regards,
  Nirmal jose.
  nirmaljose1309@gmail.com:rolleyes::rolleyes:

  Tags:  quot error vlc bt4 gmail mail BackTrack package and feature Requests  

• 8:44

  How this works

   » ‎ remote-exploit & backtrack
  Hello experts, I'm using BT4 in my usb for portable purpose.
  
  On the run,, i would like to view movies.
  
  So, i encouraged to install VLC
  
  apt-get vlc
  
  But, i find error, while unpacking deb.
  
  Could you tell me,
  
  1.after typing the command "apt-get vlc"
  
  were the downloaded items get stored.
  
  2.How to overcome the error.
  
  mail me if you have more details share.
  
  with regards,
  Nirmal jose.
  nirmaljose1309@gmail.com:rolleyes::rolleyes:

  Tags:  quot error vlc bt4 gmail mail BackTrack package and feature Requests  

• 7:19

  Salve a tutti

   » ‎ remote-exploit & backtrack
  Inizio salutando tutti visto che nella mail inviatami subito dopo la conferma della registrazione mi è stato scritto che posso postare solo qui.
  Aspetterò i tre giorni prima di poter fare qualche domanda, ho già cercato nel sito ma non ho trovato ciò che desideravo...ora cerco meglio nel forum, anche quello internazionale.
  Detto ciò ho scoperto la backtrack da poco (mese scorso) tuttavia mi sono deciso a utilizzarla/installarla solo questa settimana perchè stavo finendo di testare fedora 12 :p
  Mmmmmm bhè non so che altro dire :D

  Tags:  tutti solo che mail BackTrack cerco Angolo dei Newbie  

• January 26, 2010
• 0:00

  MDVSA-2010-025.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-025 - Multiple vulnerabilities were discovered and corrected in php-pear. Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 f for PEAR allows remote attackers to read and write arbitrary files via a crafted parameter, and possibly other parameters, a different vulnerability than CVE-2009-4023. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct these issues.

  Tags:  sendmail mail vulnerability mail-package corporate-desktop linux-security  

• January 25, 2010
• 13:00

  Bugtraq: [ MDVSA-2010:025 ] php-pear-Mail

   » ‎ SecurityFocus Vulnerabilities
  [ MDVSA-2010:025 ] php-pear-Mail

  Tags:  bugtraq mdvsa mail php-pear  

• January 22, 2010
• 9:00

  Fake Mail Send To Inbox ?

   » ‎ darkc0de
  Fake Mail Send To Inbox ?

  Tags:  mail fake send fake-mail  

• January 21, 2010
• 6:49

  sslstrip e login mail

   » ‎ remote-exploit & backtrack
  Ciao a tutti sto testando su una rete interna la nuova release bt4.
  in particolare sto testando il software sslstrip.
  
  Su mail come libero registra correttamente utente e password e mi reinderizza alla pagina dovuta, su mail come gmail oppure una mia mail interna che usa https. registra utente e password inseriti ma mi rimanda alla pagina di login, qualcuno può aiutarmi?
  Grazie

  Tags:  login sslstrip mail pagina-di-login ciao-a-tutti Supporto Software