CVE-2024-31204

creationtimestamp| type| source ---|---|--- 2024-06-19 11:50:05+00:00| seen| https://t.me/truesecator/5872 2024-06-23 23:31:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10727...

Mailcow Mail Server Flaws Expose Servers to Remote Code Execution

Two security vulnerabilities have been disclosed in the Mailcow open-source mail server suite that could be exploited by malicious actors to achieve arbitrary code execution on susceptible instances. Both shortcomings impact all versions of the software prior to version 2024-04, which was release...

CVE-2024-31204 mailcow Cross-site Scripting Vulnerability via Exception Handler

mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versions prior to 2024-04. This vulnerability resides in the exception handling mechanism, specifically when not operating in DEVMODE. The system saves...