CVE-2026-101403

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Email Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successf...

CVE-2026-101402

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Email Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successf...

CVE-2026-101671

A vulnerability exists in the Oracle Email Center product of Oracle E-Business Suite (specifically the Message Component ) in supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can compromise the product, provided they can induce human interaction from a ...

CVE-2026-101670

A vulnerability exists in the Message Component of the Oracle Email Center product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise Oracle Email Center. Successful exploitation may resul...

CVE-2026-101408

A vulnerability exists in the Email Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting versions 17.0-26.9 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires h...

CVE-2026-101403

A vulnerability exists in the Siebel Apps - Marketing product of Oracle Siebel CRM within the Email Marketing component (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, though it requires human interactio...

CVE-2026-101402

A vulnerability exists in the Email Marketing component of the Oracle Siebel CRM (Siebel Apps - Marketing) product, affecting supported versions 17.0-26.9 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the application. Successf...

spyder-osint

Spyder🕷 Spyder is a universal open-source intelligence OSINT research tool that performs searches using large global databases. Features 1. Phone number information 2. IP address information 3. SocialsFacebook, Instagram, Telegram, Twitter information 4. Email information & Email bomber 5. Person...

CVE-2026-113583

Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt text or URL values in an HTML email's external image tag when ALLOWEXTERNALIMAGESOURCES is enabled. Attackers can send ...

Exploit for CVE-2026-93300

CVE-2026-93300 — EventON - Subscriber ≤ 1.4.5 Unauthenticated...

EUVD-2026-104966

Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt text or URL values in an HTML email's external image tag when ALLOWEXTERNALIMAGESOURCES is enabled. Attackers can send ...

CVE-2026-113583

Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt text or URL values in an HTML email's external image tag when ALLOWEXTERNALIMAGESOURCES is enabled. Attackers can send ...

CVE-2026-113583 Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js

Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt text or URL values in an HTML email's external image tag when ALLOWEXTERNALIMAGESOURCES is enabled. Attackers can send ...

CVE-2026-113583

Cypht webmail versions 2.0.0 through 2.12.2 are vulnerable to a Stored DOM-based Cross-Site Scripting (XSS) flaw. When the ALLOW_EXTERNAL_IMAGE_SOURCES setting is enabled, an attacker can execute arbitrary JavaScript by sending a specially crafted email. The vulnerability exists because the exter...

CVE-2026-113583 Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js

Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt text or URL values in an HTML email's external image tag when ALLOWEXTERNALIMAGESOURCES is enabled. Attackers can send ...

CVE-2026-113583 Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js

Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt text or URL values in an HTML email's external image tag when ALLOWEXTERNALIMAGESOURCES is enabled. Attackers can send ...

CVE-2026-113442

Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient...

CVE-2026-113442

The TYPO3 Fluid-Form by coding.ms extension (fluid_form ) is vulnerable to Cross-Site Scripting (XSS) due to a lack of input escaping. Specifically, values provided by visitors are inserted into the HTML summary email without proper sanitization. This allows an unauthenticated attacker to inject ...

CVE-2026-113442 Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)

Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient...

CVE-2026-113442

Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient...