The vulnerability in the implementation of the dmarc_dns_lookup function (dmarc.c) of the Exim mail server’s DMARC handler allows a hacker to gain unauthorized access to protected information.

The vulnerability of the implementation of the dmarcdnslookup function dmarc.c, which is part of the DMARC email server handler from Exim, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected informati...

The vulnerability of the Regex Handler component of the Exim mail server, related to memory usage after it is released, allows a attacker to cause a service failure.

The vulnerability of the Exim mail server’s Regular Expression Handler component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20221028-01

Exim mail server vulnerability is related to the dmarcdnslookup function of the dmarc.c file of the DMARC handler component. Exploitation of the vulnerability could allow an attacker acting remotely to cause a memory freeing and gain access to sensitive data Exim mail server vulnerability is...

The vulnerability of the SMTP server of the SuiteCRM system, which manages customer relationships, allows attackers to compromise the integrity of the protected information.

The vulnerability of the SMTP server of the SuiteCRM system for managing customer relationships is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

No rate limit on email triggering during "resend email" action results in email flooding or a spam attack or a financial loss to the company itself

Description When a user is setting up 2FA , a verification code will be sent to the registered email . There is no rate limit on email triggering that will result in an email flood / does attack or will also increase the expenses on your mail server as an attacker can send 1 million emails throug...

mailcow redirect vulnerability

mailcow is a mail server suite. mailcow versions prior to 2022.09 contain a redirection vulnerability, which stems from the system's failure to reasonably handle target hops. An attacker could exploit the vulnerability by crafting a custom Swagger API template to spoof authorization links and...

CVE-2022-39258

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to stea...

CVE-2022-39258 mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to stea...

PT-2022-7401 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.3 Description: The issue concerns the exposure of private information defined in the setup of GLPI, such as smtp or cas hosts, to unauthorized individuals. This exposure can be exploited remotely, allowing attacker...

Ubuntu: Security Advisory (USN-174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Alt-N MDaemon 跨站脚本漏洞

Alt-N MDaemon is a mail service system from Alt-N Corporation that provides complete mail server functionality, protects users from spam, enables web login to send and receive emails, supports remote management, and protects the system against email viruses when used in conjunction with the MDaem...

Exim < 4.96 DoS

According to its banner, the version of Exim running on the remote host is prior to 4.96. It is, therefore, potentially affected by an invalid free error which can be exploited by a remote, unauthenticated attacker. Successful exploitation may result in a denial of service. This vulnerability...

The vulnerability of the pam_converse function (auths/call_pam.c) in the Exim mail server allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pamconverse function auths/callpam.c in the Exim mail server relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20220714-02

A vulnerability in the passdb account database of the Dovecot mail server is related to errors in the configuration. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...

CVE-2021-38289

An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts...

Novastar-VNNOX-iCare Novaicare 安全漏洞

Novastar-VNNOX-iCare Novaicare is an application used to centrally monitor the status of LED screen displays by Xi'an Novaicare Technology Co. in China. A security vulnerability exists in Novastar-VNNOX-iCare Novaicare version 7.16.0, which can be exploited by an attacker to elevate privileges an...

The vulnerability of the Dovecot mail server’s passdb account database allows a hacker to escalate their privileges.

The vulnerability of the Dovecot mail server’s passdb database account database is related to configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Phishing Attack

next-auth is vulnerable to phishing attacks. A remote attacker is able to pass a specifically crafted input to the e-mail signin endpoint which contains malicious HTML, tricking the e-mail server to send it to the user which allows the attacker to perform phishing attacks on the victim...

CVE-2022-31127 Improper handling of email input in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail signin endpoint that contains some malicious HTML, tricking the e-mail server to send it to the user, so they can perform a phishing attack. Eg.:...

[SECURITY] Fedora 35 Update: python-twisted-22.4.0-1.fc35

Twisted is a networking engine written in Python, supporting numerous protoco ls. It contains a web server, numerous chat clients, chat servers, mail servers and more...