MAL-2026-2172 Malicious code in v2-8-3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b90faec9a57b74163b9282007ed27f9602abf0d5307115928eb4ca75d98f8c72 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

编号撤回

Zimbra Collaboration Suite ZCS is an open-source collaboration suite developed by Zimbra Corporation. This product includes features such as WebMail, calendars, and contact management. The CVE number for this product has been withdrawn...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

DEBIAN-CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

UBUNTU-CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

EUVD-2025-208920

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

CVE-2025-71276

SOGo prior to 5.12.5 is described as having an XSS vulnerability affecting events, tasks, and contacts categories. The connected sources confirm the affected software version range and the vulnerability class (XSS), but do not provide exploit details, impact scope beyond the component areas, or r...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

Linux Distros Unpatched Vulnerability : CVE-2025-71276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories. CVE-2025-71276 Note that Nessus relies on the presence of the...

PT-2026-26960

Name of the Vulnerable Software and Affected Versions SOGo versions prior to 5.12.5 Description SOGo groupware is susceptible to a cross-site scripting XSS issue affecting events, tasks, and contacts categories. The issue allows for potential malicious code execution within the browser of a user...

CVE-2025-71276: Improper Neutralization of Input During Web Page Generation

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

The vulnerability of the Nextcloud Contacts application, a cloud-based software for creating and using a Nextcloud data storage system, stems from the lack of protective measures taken for the web page structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Nextcloud Contacts application, a cloud-based software for creating and using Nextcloud data storage, is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

Hackers Spread Fake Red Alert Rocket Alert App to Spy on Israeli Users

Researchers at Acronis have discovered a malicious trojanized version of the Red Alert rocket warning app targeting Israeli Android users. Distributed via fake Home Front Command SMS messages, this spyware steals GPS data, SMS messages, and contact lists while maintaining full alert functionality...

[SECURITY] Fedora 43 Update: nextcloud-32.0.6-1.fc43

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

CVE-2026-21389

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the request body sent to the contacts import route...