155 matches found
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.7.1 MFSA 2026-08 bsc1257397: CVE-2026-0818: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content Patch Instructions: To install this SUSE update use the...
SUSE CVE-2026-0818
When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If...
Cross-site Scripting (XSS)
Overview mailparser is an email parser. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the textToHtml function due to the improper sanitisation of URLs in the email content. An attacker can execute arbitrary scripts in victim browsers by adding extra quote " to t...
mail/mailpit -- Cross-Site WebSocket Hijacking
Mailpit author reports: The Mailpit WebSocket server is configured to accept connections from any origin. This lack of Origin header validation introduces a Cross-Site WebSocket Hijacking CSWSH vulnerability. An attacker can host a malicious website that, when visited by a developer running Mailp...
Open-Xchange OX App Suite 安全漏洞
Open-Xchange OX App Suite is a productivity application suite from Open-Xchange Germany. A security vulnerability exists in Open-Xchange OX App Suite that originates from malicious email content executable script code that could lead to the disclosure of sensitive information...
CVE-2025-30191
Open-Xchange OX App Suite is affected by CVE-2025-30191. The issue involves malicious email content exploited to trigger redressing attacks, allowing users to perform unintended actions or disclose information. The underlying cause, as stated, is the sanitization procedure that now denies attribu...
CVE-2025-30191
Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedur...
EUVD-2017-15993
Malware in sbrugna...
EUVD-2013-3994
Malware in sbrugna...
EUVD-2018-10234
Malware in sbrugna...
EUVD-2015-7513
Malware in sbrugna...
EUVD-2013-3996
Malware in sbrugna...
EUVD-2023-43649
Malicious code in bioql PyPI...
EUVD-2021-27554
Malicious code in bioql PyPI...
EUVD-2023-58229
Malicious code in bioql PyPI...
EUVD-2025-28622
Malicious code in bioql PyPI...
EUVD-2023-32348
Malicious code in bioql PyPI...
EUVD-2023-1544
Malicious code in bioql PyPI...
EUVD-2023-12305
Malicious code in bioql PyPI...
CVE-2025-59411
CubeCart is an ecommerce software solution. Prior to version 6.5.11, the contact form’s Enquiry field accepts raw HTML and that HTML is included verbatim in the email sent to the store admin. By submitting HTML in the Enquiry, the admin receives an email containing that HTML. This indicates user...