427 matches found
CVE-2025-57881
Talos reports CVE-2025-57881: a post-auth reflected XSS in MedDream PACS Premium 7.3.6.870 via Pacs/modifyEmail.php, where the server parameter is echoed into HTML without sanitization. A crafted URL can trigger arbitrary JavaScript execution in the affected web interface. Vulnerable versions: Me...
CVE-2025-57881
A reflected cross-site scripting xss vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
PT-2026-3609
A reflected cross-site scripting xss vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2022-0745
The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body...
CVE-2024-34058
The WebTop package for NethServer 7 and 8 allows stored XSS for example, via the Subject field if an e-mail message...
Duplicate Advisory: Nodemailer is vulnerable to DoS through Uncontrolled Recursion
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rcmh-qjqh-p98v. This link is maintained to preserve external references. Original Description A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header...
TencentOS Server 3: thunderbird (TSSA-2025:0600)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0600 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
EUVD-2025-34790
PrestaShop Checkout allows customer account takeover via email...
CVE-2025-59419
Netty CVE-2025-59419 is a CRLF injection vulnerability in the SMTP codec. In Netty versions prior to 4.1.128.Final and 4.2.7.Final, io.netty.handler.codec.smtp.DefaultSmtpRequest concatenates parameters into SMTP commands without sanitization, enabling an attacker-controlled CRLF sequence in reci...
EUVD-1999-1171
Malware in sbrugna...
EUVD-2002-0487
Malware in sbrugna...
EUVD-2011-2136
Malware in sbrugna...
EUVD-2020-12601
Malware in sbrugna...
EUVD-2012-3666
Malware in sbrugna...
EUVD-2000-0733
Malware in sbrugna...
EUVD-2000-0566
Malware in sbrugna...
EUVD-2018-2570
Malware in sbrugna...
EUVD-2014-2117
Malware in sbrugna...