16006 matches found
The vulnerability of the dn_expand() function in the Exim mail server allows a hacker to gain unauthorized access to protected information.
The vulnerability of the dnexpand function in the Exim mail server is related to errors in the representation of certain functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-85586: Improper Control of Interaction Frequency
phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...
CVE-2026-85424 MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR
MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...
CVE-2026-84753
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84755
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84755 WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
EUVD-2026-70587
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84755
The Mail Mint WordPress plugin versions
CVE-2026-84755 WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84753 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84753 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84753
CVE-2026-84753 affects the WordPress Mail Mint plugin in versions 1.31.0 and below , where an unauthenticated PHP Object Injection flaw allows a remote attacker to inject arbitrary serialized objects into the application. The vulnerability is rated CVSS 9.8 (CRITICAL) with high impact to confiden...
EUVD-2026-70589
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...
EUVD-2026-70405
n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail v1 and Brevo nodes to the mail composer without verifying it is a string. An authenticated user able to run a workflow can supply an expression that resolves to an object carrying a path or href property, causing t...
CVE-2026-85170 n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes
n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail v1 and Brevo nodes to the mail composer without verifying it is a string. An authenticated user able to run a workflow can supply an expression that resolves to an object carrying a path or href property, causing t...
CVE-2026-85170
n8n versions before 1.123.73 , 2.35.4 , and 2.36.2 are vulnerable to local file read and SSRF through the Gmail (v1) and Brevo nodes. The root cause is that these nodes pass message content to the mail composer without verifying it is a string. An authenticated user able to run a workflow can sup...
