15316 matches found
CVE-2022-45807 WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807 WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807
CVE-2022-45807 is a CSRF vulnerability in the WPVibes WP Mail Log plugin, affecting versions <= 1.0.1. The NVD entry reports a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, requiring user interaction and no privileges, and impact to confidentiality, integrity, and availability...
WordPress Plugin WP Mail Log 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2023-14759 · Wpvibes · Wpvibes Wp Mail Log
Name of the Vulnerable Software and Affected Versions: WPVibes WP Mail Log plugin versions 1.0.1 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF in the WPVibes WP Mail Log plugin. This means an attacker can trick a user into performing unintended actions on a web...
Hackers Abused Microsoft's "Verified Publisher" OAuth Apps to Breach Corporate Email Accounts
Microsoft on Tuesday said it took steps to disable fake Microsoft Partner Network MPN accounts that were used for creating malicious OAuth applications as part of a phishing campaign designed to breach organizations' cloud environments and steal email. "The applications created by these fraudulen...
PT-2023-24200 · Nextcloud +1 · Nextcloud Calendar +1
Name of the Vulnerable Software and Affected Versions: Nextcloud Calendar app versions prior to 3.5.5 Nextcloud Calendar app versions prior to 4.2.3 Description: The issue concerns the disclosure of internal website paths when the SMTP server is unavailable. This affects the functionality of the...
Fedora: Security Advisory for seamonkey (FEDORA-2023-dfeb282345)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Thunderbird 安全漏洞
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols, and HTML mail format. A security vulnerability exists in Mozilla Thunderbird. An attacker exploiting this...
RLSA-2023:0476 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: libusrsctp library out of date CVE-2022-46871 Mozilla: Arbitrary file read from GTK drag and drop on Linux CVE-2023-23598 Mozilla: Memory safety bugs fixed ...
RLSA-2023:0463 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: libusrsctp library out of date CVE-2022-46871 Mozilla: Arbitrary file read from GTK drag and drop on Linux CVE-2023-23598 Mozilla: Memory safety bugs fixed ...
important E-Mail Input Field bypassed allowing Account Lockout and Takeover
Dear Ladies and Gentlemen, First of all, thank you for your time and effort in reading my Report. While doing the Penetration Test my Brother Josef Hassan [email protected] and I were able to Account Lockout Vulnerability by bypassing the Input of the E-Mail Address. The Process of...
PT-2023-1266 · Mozilla +9 · Thunderbird +9
Name of the Vulnerable Software and Affected Versions: Thunderbird versions 68 through 102.7.0 Description: The issue is related to errors in checking the S/Mime signature's OCSP certificate revocation status. This could allow a remote attacker to implement a spoofing attack. Mail signed with a...
Security Vulnerabilities fixed in Thunderbird 102.7.1 — Mozilla
Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug...
About the security content of iOS 15.7.3 and iPadOS 15.7.3
About the security content of iOS 15.7.3 and iPadOS 15.7.3 This document describes the security content of iOS 15.7.3 and iPadOS 15.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
PT-2023-18990 · Apple · Ipados +3
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7.3 iPadOS versions prior to 15.7.3 macOS Ventura versions prior to 13.2 iOS versions prior to 16.3 iPadOS versions prior to 16.3 Description: A logic issue was addressed with improved state management. The issue caus...
[SECURITY] Fedora 36 Update: awstats-7.8-9.fc36
Advanced Web Statistics is a powerful and full-featured tool that generates advanced web server graphical statistics. This server log analyzer works from the command line or as a CGI and shows all information your log contains, in graphical web pages. It can analyze a lot of web/wap/proxy servers...
Fedora: Security Advisory for awstats (FEDORA-2023-fda5480804)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2023-22278
m-FILTER prior to Ver.5.70R01 Ver.5 Series and m-FILTER prior to Ver.4.87R04 Ver.4 Series allows a remote unauthenticated attacker to bypass authentication and send users' unintended email when email is being sent under the certain conditions. The attacks exploiting this vulnerability have been...
A week in security (January 9—15)
Last week on Malwarebytes Labs: Slack private code on GitHub stolen Crypto-inspired Magecart skimmer surfaces via digital crime haven Security vulnerabilities in major car brands revealed Microsoft ends extended support for Windows 7 and Windows Server 2008 today Pokemon NFT card game malware...