6175 matches found
CVE-2025-34423 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity validation or a secure search order. A...
CVE-2025-34423 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity validation or a secure search order. A...
CVE-2025-34420 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAM.DLL from its installation directory without sufficient integrity validation or a secure search order. A...
CVE-2025-34420
MailEnable
GHSA-MQ8M-42GH-WQ7R Gogs vulnerable to a bypass of CVE-2024-55947
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
CVE-2025-8110
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
CVE-2025-8110
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
CVE-2025-8110
CVE-2025-8110 affects Gogs self-hosted Git service versions 0.13.3 and earlier, due to improper symbolic link handling in PutContents that allows a symlink to target outside the repository, enabling remote code execution. Root cause: API writes to file paths without validating symlinks. Impact: l...
CVE-2025-8110
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
CVE-2025-8110 File overwrite in file update API in Gogs
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
EUVD-2025-202425
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
MailEnable code-related vulnerabilities
MailEnable is a Windows-based business e-mail server from MailEnable Australia. MailEnable suffers from an insecure DLL loading vulnerability that can be exploited by an attacker to cause local arbitrary code execution...
MailEnable code-related vulnerabilities
MailEnable is a Windows-based business e-mail server from MailEnable Australia. MailEnable suffers from an insecure DLL loading vulnerability that can be exploited by an attacker to cause local arbitrary code execution...
PT-2025-50346
Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an issue where the software loads DLLs in an insecure manner, potentially allowing a local attacker to execute arbitrary code. Specifically, the MailEnable...
PT-2025-50340
Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an issue where an unsafe Dynamic Link Library DLL loading process can allow a local attacker to execute arbitrary code. The MailEnable administrative...
MailEnable code-related vulnerabilities
MailEnable is a Windows-based business e-mail server from MailEnable Australia. MailEnable suffers from an insecure DLL loading vulnerability that can be exploited by an attacker to cause local arbitrary code execution...
PT-2025-50342
Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an unsafe DLL loading issue that could allow a local attacker to execute arbitrary code. The MailEnable administrative executable loads MEAIMF.DLL from the...
MailEnable code-related vulnerabilities
MailEnable is a Windows-based business e-mail server from MailEnable Australia. MailEnable suffers from an insecure DLL loading vulnerability that can be exploited by an attacker to cause local arbitrary code execution...
CVE-2025-8110: Improper Limitation of a Pathname to a Restricted Directory
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...
PT-2025-50348
Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an issue where the software loads DLLs unsafely, potentially allowing a local attacker to run arbitrary code. The MailEnable administrative executable loads...