432 matches found
EUVD-2023-54713
Malicious code in bioql PyPI...
EUVD-2022-27434
Malicious code in bioql PyPI...
EUVD-2025-1726
Malicious code in bioql PyPI...
EUVD-2024-36730
Malicious code in bioql PyPI...
EUVD-2022-15811
Malicious code in bioql PyPI...
EUVD-2023-2852
Malicious code in bioql PyPI...
EUVD-2024-47656
Malicious code in bioql PyPI...
EUVD-2023-45832
Malicious code in bioql PyPI...
EUVD-2024-20706
Malicious code in bioql PyPI...
EUVD-2022-39580
Malicious code in bioql PyPI...
EUVD-2022-4091
Malicious code in bioql PyPI...
EUVD-2022-3745
Malicious code in bioql PyPI...
Nextcloud: Mail stored HTML injection in subject text
A vulnerability was discovered in the mail stored HTML injection in subject text. The vulnerability allowed for arbitrary HTML code to be injected into the subject line of emails stored in the system...
CVE-2025-8422 Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read
The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the sendemail function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which...
BIT-LIBPYTHON-2023-27043
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is...
CVE-2025-8419
A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters limited local part of the email, so the attack is limited to very shorts emails subject...
CVE-2025-8419 Org.keycloak/keycloak-services: keycloak smtp inject vulnerability
A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters limited local part of the email, so the attack is limited to very shorts emails subject...
PT-2025-30636 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.9 through 18.0.4 GitLab CE/EE versions 18.1 through 18.1.2 GitLab CE/EE versions 18.2 through 18.2.0 Description: An issue exists in GitLab CE/EE that could allow an unauthorized user to access custom service desk ema...
CVE-2024-42912
A cross-site scripting XSS vulnerability in META-INF Kft. Email This Issue Data Center before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message...
