7483 matches found
Command injection
mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - which can be made available to standard users by assigning them the necessary permission - suffers from a shell command injection. A malicious user can abuse this vulnerability to...
CVE-2023-26490 mailcow is vulnerable to shell command injection via xoauth2 authentication in imapsync
mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - which can be made available to standard users by assigning them the necessary permission - suffers from a shell command injection. A malicious user can abuse this vulnerability to...
CVE-2023-24641
creationtimestamp| type| source ---|---|--- 2023-03-03 22:35:19+00:00| seen| https://t.me/cibsecurity/59398 2025-03-08 04:35:51+00:00| seen| Telegram/LiPKoiuN6sw6UgPM2zVO1t6mYzCFXk7JxAoX5fgukXIC7mjz...
CVE-2022-4645
creationtimestamp| type| source ---|---|--- 2023-03-03 18:34:44+00:00| seen| https://t.me/cibsecurity/59387 2025-04-04 21:36:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10578...
CVE-2022-2835
creationtimestamp| type| source ---|---|--- 2023-03-03 18:34:42+00:00| seen| https://t.me/cibsecurity/59385...
CVE-2023-20061
creationtimestamp| type| source ---|---|--- 2023-03-03 18:34:37+00:00| seen| https://t.me/cibsecurity/59383...
CVE-2023-26492
creationtimestamp| type| source ---|---|--- 2023-03-03 18:22:27+00:00| published-proof-of-concept| https://github.com/directus/directus/security/advisories/GHSA-j3rg-3rgm-537h 2023-03-04 00:35:24+00:00| seen| https://t.me/cibsecurity/59400 2025-02-25 15:23:24+00:00| published-proof-of-concept|...
CVE-2022-45551
creationtimestamp| type| source ---|---|--- 2023-03-03 16:35:56+00:00| seen| https://t.me/cibsecurity/59370...
CVE-2022-21123
creationtimestamp| type| source ---|---|--- 2023-03-03 12:46:27+00:00| seen| https://t.me/truesecator/4127 2023-03-06 08:40:53+00:00| seen| https://t.me/kasperskyb2b/504 2026-07-17 05:00:04+00:00| seen| https://t.me/EchelonEyes/360 2026-07-18 00:00:40+00:00| seen| https://t.me/EchelonEyes/360...
CVE-2022-21166
creationtimestamp| type| source ---|---|--- 2023-03-03 12:46:27+00:00| seen| https://t.me/truesecator/4127 2026-07-17 05:00:04+00:00| seen| https://t.me/EchelonEyes/360 2026-07-18 00:00:40+00:00| seen| https://t.me/EchelonEyes/360...
PT-2023-20680 · Mailcow +3 · Mailcow +3
Name of the Vulnerable Software and Affected Versions: mailcow versions prior to the 2023-03 Update Description: The Sync Job feature in mailcow, a dockerized email package, suffers from a shell command injection. This allows a malicious user to obtain shell access to the Docker container running...
CVE-2023-0084
creationtimestamp| type| source ---|---|--- 2023-03-02 22:34:45+00:00| seen| https://t.me/cibsecurity/59340 2026-09-01 20:01:05+00:00| seen| https://t.me/hackingAttack/89250 2026-09-02 01:01:25+00:00| seen| https://t.me/hackingAttack/89250 2026-09-04 23:00:04+00:00| seen|...
CVE-2023-26473
creationtimestamp| type| source ---|---|--- 2023-03-02 22:34:43+00:00| seen| https://t.me/cibsecurity/59338...
CVE-2021-32857
creationtimestamp| type| source ---|---|--- 2023-03-02 22:13:02+00:00| seen| https://t.me/cibsecurity/58608...
CVE-2023-1079
creationtimestamp| type| source ---|---|--- 2023-03-02 21:00:33+00:00| seen| Telegram/XOMJdIzTWJLmbXBuvPnIRRZS1JVtxTC2IxA8AqelBxtgeNM...
CVE-2023-26780
creationtimestamp| type| source ---|---|--- 2023-03-02 18:34:30+00:00| seen| https://t.me/cibsecurity/59325 2025-03-07 17:35:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6869...
CVE-2023-25361
creationtimestamp| type| source ---|---|--- 2023-03-02 18:34:29+00:00| seen| https://t.me/cibsecurity/59324 2025-03-07 16:35:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6848 2025-03-08 04:35:51+00:00| seen| Telegram/IVe4wF9fAMnOexx9hiwn8ofaAA5xg5VOUR0Q4kvfBOpQRCMr...
CVE-2023-25363
creationtimestamp| type| source ---|---|--- 2023-03-02 18:34:23+00:00| seen| https://t.me/cibsecurity/59321 2025-03-07 17:35:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6867...