EUVD-2026-95038

Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allows a remote authenticated user to end other users' sessions. The table of browser sessions, shared by every account, the server administrator and support sessions, dropped...

CVE-2026-107586 Allocation of Resources Without Limits or Throttling in hMailServer

Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allows a remote authenticated user to end other users' sessions. The table of browser sessions, shared by every account, the server administrator and support sessions, dropped...

EUVD-2026-95037

Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to make other users' OpenID Connect, SAML and passkey sign-ins fail. The routes that start a single sign-on and hand out a passkey sign-in...

CVE-2026-107585 Allocation of Resources Without Limits or Throttling in hMailServer

Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to make other users' OpenID Connect, SAML and passkey sign-ins fail. The routes that start a single sign-on and hand out a passkey sign-in...

CVE-2026-107585

Progressive Robot hMailServer versions 6.3.4 and 6.3.5 are vulnerable to an uncontrolled eviction issue in the REST API pending sign-in tables. Because the routes for single sign-on (OpenID Connect, SAML) and passkey challenges are accessible without authentication, an unauthenticated remote atta...

CVE-2026-107585 Allocation of Resources Without Limits or Throttling in hMailServer

Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to make other users' OpenID Connect, SAML and passkey sign-ins fail. The routes that start a single sign-on and hand out a passkey sign-in...

CVE-2024-11972-PoC

CVE-2024-11972-PoC Hunk Companion 1.9.0 - Instalação não autenticada de plugins Descrição O plugin Hunk Companion do WordPress anterior à versão 1.9.0 não autoriza corretamente alguns endpoints da REST API, permitindo que solicitações não autenticadas instalem e ativem plugins Hunk Companion do...

CVE-2026-14281

CVE-2026-14281 — WAWP Automation Web Platform अनधिकृत विशेषाधिकार वृद्धि WordPress प्लगइन Automation Web Platform automation-web-platform — WAWP / Notifications & OTP for WooCommerce में CVE-2026-14281 के लिए Python 3 PoC। PoCbit PoCbit पर सूचीबद्ध — समुदाय कैटलॉग: https://pocbit.org/pocs/ PoC...

reburp

reburp Burp's API/MCP is LIMITED - reburp is a Burp Suite extension that exposes the full Montoya API as a locally served openapi REST API, optimized for your AI agents. Issues | Discussions What is reburp reburp turns Burp Suite into something you can script. It loads as a Java extension and...

CVE-2026-8181

CVE-2026-8181 - Exploração de Bypass de Autenticação do Burst Statistics Python 2.7 exploit para a vulnerabilidade do plugin Burst Statistics CVE-2026-8181 que permite a atacantes não autenticados contornar a autenticação da API REST, recuperar senhas de aplicativos e criar novos usuários...

CVE-2026-107583

Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. The route that renders ...

CVE-2026-107582

Inefficient algorithmic complexity in the REST API 6.3.3 through 6.3.5 and the IMAP PREVIEW response 6.2.22 through 6.3.5 of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. To...

CVE-2026-107574

Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the mail services unavailable. Reading a JSON object kept the first of each duplicated member name by searching the members already read, so an object of N...

CVE-2026-107577

Inefficient algorithmic complexity and a non-terminating loop in the MIME processing of received messages in Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a remote unauthenticated attacker to make the mail services unavailable by sending a message. Removing a MIME header parameter whose...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST bypass de autenticação ⚠️ Aviso Legal Esta ferramenta destina-se apenas a pesquisas de ataque e defesa em segurança cibernética. Por favor, use-a em conformidade com a Lei de Segurança Cibernética! Se o usuário utilizar esta ferramenta para...

CVE-2026-107583 Inefficient Algorithmic Complexity in hMailServer

Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. The route that renders ...

CVE-2026-107583 Inefficient Algorithmic Complexity in hMailServer

Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. The route that renders ...

EUVD-2026-94866

Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. The route that renders ...

CVE-2026-107583

Progressive Robot hMailServer versions 6.3.2 through 6.3.5 are vulnerable to an inefficient algorithmic complexity flaw in the webmail's message view of the REST API . A remote unauthenticated attacker can send a message containing an HTML reference to a single small embedded image a very large n...

CVE-2026-107583 Inefficient Algorithmic Complexity in hMailServer

Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. The route that renders ...