15310 matches found
Path traversal
Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...
CVE-2023-48380 Softnext Mail SQR Expert - Command Injection
Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command,...
CVE-2023-48380
The CVE-2023-48380 entry concerns Softnext Mail SQR Expert, an email management platform. The vulnerability arises from insufficient filtering of a special character within a specific function, enabling an adjacent-authenticated remote attacker to perform command injections and execute arbitrary ...
CVE-2023-48380 Softnext Mail SQR Expert - Command Injection
Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command,...
CVE-2023-48379 Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)
Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response...
CVE-2023-48379
CVE-2023-48379 affects Softnext Mail SQR Expert. The vulnerability arises from inadequate filtering of a specific URL parameter within a specific function, enabling an unauthenticated remote attacker to perform a Blind SSRF and infer internal network topology from URL error responses. Reported ac...
CVE-2023-48378 Softnext Mail SQR Expert - Path Traversal
Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...
CVE-2023-48378
CVE-2023-48378 concerns Softnext Mail SQR Expert, where a path traversal flaw in a URL parameter allows an unauthenticated remote attacker to bypass authentication and download arbitrary system files. The vulnerability is described with CVSS v3.1 base score 7.5 (High) and network attack vector wi...
CVE-2023-48378 Softnext Mail SQR Expert - Path Traversal
Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...
Softnext Technologies Mail SQR Expert Security Vulnerability
Softnext Technologies Mail SQR Expert is a comprehensive email content security management system from Softnext Technologies, China. A security vulnerability exists in Softnext Technologies Mail SQR Expert prior to v230330, which is caused by a Local File Inclusion LFI vulnerability in URLs...
PT-2023-30805 · Softnext · Softnext Mail Sqr Expert
Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Description: The issue is related to inadequate filtering for a specific URL parameter within a specific function in Softnext Mail SQR Expert, an email management platform. This allows ...
Softnext Technologies Mail SQR Expert Code Issue Vulnerability
Softnext Technologies Mail SQR Expert is a comprehensive email content security management system from Softnext Technologies, China. A code issue vulnerability exists in Softnext Technologies Mail SQR Expert prior to v230330, which arises from insufficient filtering of specific URL parameters in...
Softnext Technologies Mail SQR Expert Path Traversal Vulnerability
Softnext Technologies Mail SQR Expert is a comprehensive email content security management system from Softnext Technologies. A path traversal vulnerability exists in Softnext Technologies Mail SQR Expert prior to v230330, which is a path traversal vulnerability in the parameters of a specific UR...
PT-2023-30804 · Softnext · Softnext Mail Sqr Expert
Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Description: The issue is related to a path traversal vulnerability within a specific URL parameter. This allows an unauthenticated remote attacker to bypass authentication and download...
Softnext Technologies Mail SQR Expert Operating System Command Injection Vulnerability
Softnext Technologies Mail SQR Expert is a comprehensive email content security management system from Softnext Technologies. Softnext Technologies Mail SQR Expert v230330 prior version suffers from an operating system command injection vulnerability, which stems from insufficient special charact...
Arbitrary Code Execution
directmailteam/direct-mail is vulnerable to Arbitrary Code Execution. The vulnerability is due to the Configuration backend module of the extension which allows an authenticated user to write arbitrary TSConfig for folders configured as Direct Mail. This issue can be exploited by an attacker by...
Configuration Injection in extension "Direct Mail" (direct_mail)
The “Configuration” backend module of the extension allows an authenticated user to write arbitrary page TSConfig for folders configured as “Direct Mail”. Exploiting the vulnerability may lead to Configuration Injection TYPO3 10.4 and above and to Arbitrary Code Execution TYPO3 9.5 and below. A...
GHSA-P6XX-FHFW-7MJ7 Configuration Injection in extension "Direct Mail" (direct_mail)
The “Configuration” backend module of the extension allows an authenticated user to write arbitrary page TSConfig for folders configured as “Direct Mail”. Exploiting the vulnerability may lead to Configuration Injection TYPO3 10.4 and above and to Arbitrary Code Execution TYPO3 9.5 and below. A...
Surveillance by the US Postal Service
This is not about mass surveillance of mail, this is about the sorts of targeted surveillance the US Postal Inspection Service uses to catch mail thieves: To track down an alleged mail thief, a US postal inspector used license plate reader technology, GPS data collected by a rental car company,...
