17929 matches found
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is affected by SMTP injection due to Jakarta Mail and vulnerable to CVE-2025-7962.
Summary IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is affected by SMTP injection due to Jakarta Mail and vulnerable to CVE-2025-7962. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...
Server-Side Template Injection
fof/pretty-mail is vulnerable to Server-Side Template Injection. The vulnerability is due to improper validation and sanitization of email template inputs, which allows an attacker with administrative access to inject malicious template expressions and execute arbitrary system commands during ema...
📄 Zimbra Collaboration Suite Postjournal 10.0.x Remote Code Execution
A critical vulnerability exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows attackers to execute arbitrary system commands without authentication. The vulnerability is triggered through SMTP injection using a malicious RCPT TO parameter. This exploit provides full remote...
Atlassian Jira Service Management Data Center and Server 5.12.x < 5.12.27 / 10.3.x < 10.3.10 / 11.0.0 (JSDSERVER-16410)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16410 advisory. - In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8...
Kaspesky Secure Mail Gateway (Positive results) (No. 7 dated January 27, 2026, 17:48:47)
...
Kaspesky Secure Mail Gateway (Positive results) (No. 2 dated January 27, 2026, 17:48:46)
...
Kaspesky Secure Mail Gateway (Positive results) (No. 3 dated January 27, 2026, 17:48:46)
...
Kaspesky Secure Mail Gateway (Positive results) (No. 4 dated January 27, 2026 at 17:48:47)
...
Kaspesky Secure Mail Gateway (Positive Results) (No. 12 dated January 27, 2026, 17:48:48)
...
Kaspesky Secure Mail Gateway (Positive Results) (No. 11 dated January 27, 2026, 17:48:48)
...
Kaspesky Secure Mail Gateway (Positive Results) (No. 9 dated January 27, 2026, 17:48:47)
...
Kaspesky Secure Mail Gateway (Positive results) (No. 1 from January 27, 2026 at 17:48:46)
...
Kaspesky Secure Mail Gateway (Positive Results) (No. 6 dated January 27, 2026, 17:48:47)
...
Kaspesky Secure Mail Gateway (Positive Results) (No. 10 dated January 27, 2026 at 17:48:48)
...
Kaspesky Secure Mail Gateway (Positive Results) (No. 5 dated January 27, 2026, 17:48:47)
...
Kaspesky Secure Mail Gateway (Positive Results) (No. 8 dated January 27, 2026, 17:48:47)
...
The vulnerability in the application programming interface of the SmarterTools SmarterMail mail server allows a malicious individual to update the administrator password to the default value and gain unauthorized access to the server.
The vulnerability of the application software interface “force-reset-password” in the SmarterTools SmarterMail mail server is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to update the administrator...
CVE-2025-68008
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mndpsingh287 WP Mail wp-mail allows Reflected XSS.This issue affects WP Mail: from n/a through = 1.3...
PT-2026-21931
Уязвимость средства защиты электронной почты Proxmox Mail Gateway связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность и целостность защищаемой информации...
PT-2026-21930
Уязвимость средства защиты электронной почты Proxmox Mail Gateway связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность и целостность защищаемой информации...