CVE-2022-41676

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

CVE-2022-41676

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

Cross site scripting

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

CVE-2022-41676 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

CVE-2022-41676 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

CVE-2022-41676

CVE-2022-41676 affects Raiden MAILD Mail Server. The issue is insufficient filtering of user input in the website mail field, allowing a remote attacker with general user privileges to submit input containing malicious JavaScript that triggers a reflected XSS attack on the mail recipient. The vul...

CVE-2022-41675

CVE-2022-41675 affects Raiden MAILD Mail Server (Team Johnlong) with a formula/injection vulnerability in form content. A remote attacker with general user privileges can inject malicious code into the form content on the web interface. When another user exports that content to CSV, the exported ...

CVE-2022-41675 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

PT-2022-26018 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: Raiden MAILD Mail Server affected versions not specified Description: A remote attacker with general user privilege can inject malicious code in the form content of the Raiden MAILD Mail Server website. When other users export the form conten...

Team Johnlong software Raiden MAILD Mail Server 跨站脚本漏洞

Team Johnlong software Raiden MAILD Mail Server is a mail server software from China Village Rong Information Team Johnlong software Company. A security vulnerability exists in Team Johnlong software Raiden MAILD Mail Server versions prior to v4.7.4, which stems from insufficient filtering of use...

PT-2022-26019 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: Raiden MAILD Mail Server affected versions not specified Description: The issue is related to insufficient filtering for user input in the website mail field of the Raiden MAILD Mail Server. A remote attacker with general user privilege can...

Team Johnlong software Raiden MAILD Mail Server 安全漏洞

Team Johnlong software Raiden MAILD Mail Server is a mail server software from Team Johnlong software. A security vulnerability exists in Team Johnlong software Raiden MAILD Mail Server versions prior to v4.7.4. The vulnerability originates from the fact that a remote attacker with general user...

The vulnerability in the implementation of the dmarc_dns_lookup function (dmarc.c) of the Exim mail server’s DMARC handler allows a hacker to gain unauthorized access to protected information.

The vulnerability of the implementation of the dmarcdnslookup function dmarc.c, which is part of the DMARC email server handler from Exim, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected informati...

The vulnerability of the Regex Handler component of the Exim mail server, related to memory usage after it is released, allows a attacker to cause a service failure.

The vulnerability of the Exim mail server’s Regular Expression Handler component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20221028-01

Exim mail server vulnerability is related to the dmarcdnslookup function of the dmarc.c file of the DMARC handler component. Exploitation of the vulnerability could allow an attacker acting remotely to cause a memory freeing and gain access to sensitive data Exim mail server vulnerability is...

The vulnerability of the SMTP server of the SuiteCRM system, which manages customer relationships, allows attackers to compromise the integrity of the protected information.

The vulnerability of the SMTP server of the SuiteCRM system for managing customer relationships is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

No rate limit on email triggering during "resend email" action results in email flooding or a spam attack or a financial loss to the company itself

Description When a user is setting up 2FA , a verification code will be sent to the registered email . There is no rate limit on email triggering that will result in an email flood / does attack or will also increase the expenses on your mail server as an attacker can send 1 million emails throug...

mailcow redirect vulnerability

mailcow is a mail server suite. mailcow versions prior to 2022.09 contain a redirection vulnerability, which stems from the system's failure to reasonably handle target hops. An attacker could exploit the vulnerability by crafting a custom Swagger API template to spoof authorization links and...

CVE-2022-39258

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to stea...

CVE-2022-39258 mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to stea...