CVE-2026-34975

CVE-2026-34975 — CRLF-инъекция в заголовки электронной почты в Plunk через конструирование необработанного MIME Серьёзность : Высокая CVSS 8.5 CWE : CWE-93 — Некорректная нейтрализация CRLF-последовательностей 'CRLF Injection' Затронуто : useplunk/plunk все версии до исправления Консультация : GH...

CVE-2026-42879

CVE-2026-42879 - FacturaScripts - 인증된 사용자의 MIME 타입 우회를 통한 무제한 파일 업로드 요약 FacturaScripts의 제품 이미지 업로드 기능에 인증된 사용자의 무제한 파일 업로드 취약점이 존재합니다. 유효한 자격 증명을 가진 공격자는 GIF89a 헤더를 사용하여 PHP 파일을 GIF 이미지로 위장해 업로드함으로써 MIME 타입 검증을 우회할 수 있습니다. 파일은 원래 확장자.php와 같은 실행 가능한 확장자 포함로 저장됩니다. 세부 정보 취약점은 다음 위치에 존재합니다:...

CVE-2026-82524

UnoPim before 2.1.5 contains an authenticated file upload vulnerability in its TinyMCE image upload endpoint . Due to missing file extension and MIME type validation, authenticated administrators can upload arbitrary PHP files to the public storage disk, achieving remote code execution by accessi...

CVE-2026-20355

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

CVE-2026-20354

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

flanker

Flanker — разбор email-адресов и MIME для Python .. image:: https://travis-ci.org/mailgun/flanker.svg?branch=master :target: https://travis-ci.org/mailgun/flanker .. image:: https://coveralls.io/repos/github/mailgun/flanker/badge.svg?branch=master :target:...

EUVD-2026-70211

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

CVE-2026-20355 Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

CVE-2026-20355

CVE-2026-20355 affects the S/MIME decryption functionality of Cisco Secure Email . The root cause is insufficient validation of message integrity , allowing an unauthenticated, remote attacker to use a machine-in-the-middle technique to intercept and modify traffic between email gateways and reco...

EUVD-2026-70210

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

CVE-2026-20354

CVE-2026-20354 affects the S/MIME decryption functionality of Cisco Secure Email . The root cause is insufficient validation of message integrity , allowing an unauthenticated remote attacker to use a man-in-the-middle technique to intercept and modify traffic between email gateways. A successful...

CVE-2026-20354 Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

PoC-CVE-2026-38526

CVE-2026-38526 - Krayin CRM PHP 업로드 RCE Krayin CRM ≤ 2.2.x 용 자동 익스플로잇. 이 스크립트는 TinyMCE 엔드포인트/admin/tinymce/upload의 무제한 파일 업로드 취약점을 악용하여 image/jpeg로 위장해 MIME 유형 검증을 우회하고, PHP 웹쉘을 업로드한 후 웹 서버 권한으로 임의 명령을 실행합니다. 취약점 세부 정보 속성| 값 ---|--- CVE ID| CVE-2026-38526 영향받는 소프트웨어| Krayin CRM ≤ 2.2.x 취약점 유형| 무제...

EUVD-2026-68891

Sulu: Stored XSS via media download inline-disposition override...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Неаутентифицированная произвольная загрузка файлов Исследование: Atomic Edge Серьёзность: Критическая | CVSS: 9.8 | Требуется аутентификация: Нет ⚠️ v2 — Применены технические исправления на основе отзывов сообщества. Подробности см. в Журнале изменений...

EUVD-2026-68800

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload RCE...

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

GHSA-GXMJ-R5RF-GGWQ elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

Important: Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update

An update for golang-github-openprinting-ipp-usb is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...