50 matches found
EUVD-2018-7538
Malware in sbrugna...
EUVD-2018-7540
Malware in sbrugna...
EUVD-2018-7541
Malware in sbrugna...
EUVD-2018-7539
Malware in sbrugna...
EUVD-2019-17728
Malware in sbrugna...
The vulnerability of the Airmail email client is related to insufficient protection of the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the Airmail email client is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
PT-2025-39653
Уязвимость почтового клиента Airmail связана с недостаточной защитой структуры веб-страницы. Эксплуатация уязвимсоти позволяет нарушителю, действующему удаленно, проводить межсайтовые сценарные атаки XSS...
CVE-2019-8338
The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 9 and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature. Also, it does not verify the...
CVE-2019-8338
The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 9 and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature. Also, it does not verify the...
Code injection
The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 9 and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature. Also, it does not verify the...
CVE-2019-8338
The CVE-2019-8338 issue affects the Airmail GPG-PGP Plugin (versions 1.0 (9) and earlier). The vulnerability arises because the signature verification routine does not verify the signature status and also does not verify the signing key’s validity, enabling an attacker to spoof email signatures b...
CVE-2019-8338
The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 9 and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature. Also, it does not verify the...
CVE-2019-8338: Improper Verification of Cryptographic Signature
The signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 9 and earlier, does not verify the status of the signature at all, which allows remote attackers to spoof arbitrary email signatures by crafting a signed email with an invalid signature. Also, it does not verify the...
PT-2019-18974
Name of the Vulnerable Software and Affected Versions Airmail GPG-PGP Plugin versions 1.0 9 and earlier Description The issue concerns the signature verification routine, which fails to verify the status of the signature and the validity of the signing key. This allows remote attackers to spoof...
Bloop Airmail GPG-PGP Plugin Data Forgery Issue Vulnerability
Bloop Airmail is an email application from Bloop Italy.GPG-PGP Plugin is one of the encryption components. A data forgery issue vulnerability exists in Bloop Airmail GPG-PGP Plugin 1.0 9 and prior versions, which arises from a networked system or product that does not adequately validate the orig...
Over Dozen Popular Email Clients Found Vulnerable to Signature Spoofing Attacks
A team of security researchers has discovered several vulnerabilities in various implementations of OpenPGP and S/MIME email signature verification that could allow attackers to spoof signatures on over a dozen of popular email clients. The affected email clients include Thunderbird, Microsoft...
CVE-2018-15667
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction on who can use it...
CVE-2018-15670
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements "webView:decidePolicyForNavigationAction:request:frame:decisionListener:" such that OpenURL is the default URL handler. A navigation request is processed by the default URL handler only if the...
CVE-2018-15668
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...
Command injection
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction on who can use it...