Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

golang: encoding/pem: fix stack overflow in Decode

A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a large PEM input more than 5 MB, causing a stack overflow in Decode, which leads to a loss of availability...

CVE-2021-40643

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page by default/usr/sbin/sendmail it is possible to execute any command, which will be executed when we make...

CVE-2021-40643

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page by default/usr/sbin/sendmail it is possible to execute any command, which will be executed when we make...

Remote code execution

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page by default/usr/sbin/sendmail it is possible to execute any command, which will be executed when we make...

CVE-2021-40643

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page by default/usr/sbin/sendmail it is possible to execute any command, which will be executed when we make...

CVE-2021-40643

EyesOfNetwork (EON) before 07-07-2021 is affected by a remote code execution (RCE) on the mail options configuration page. The vulnerability is tied to the location of the sendmail binary (default /usr/sbin/sendmail) in the cacti configuration page, where triggering a “send test mail” can execute...

[SECURITY] Fedora 36 Update: thunderbird-91.11.0-1.fc36

Mozilla Thunderbird is a standalone mail and newsgroup client...

CVE-2020-27509

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

Cross site scripting

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

CVE-2020-27509

CVE-2020-27509 describes a persistent cross-site scripting (XSS) flaw in the Galaxkey Secure Mail Client up to version 5.6.11.5. The vulnerability arises from intercepting the HTTP POST used to send emails and injecting an XSS payload into the subject field, which executes when the recipient logs...

CVE-2020-27509

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

WordPress Mail Subscribe List plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. cross-site request forgery vulnerability exists in versions of the WordPress Mail Subscribe List plugin...

Malicious code in login.mail.ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0636f08f714839bf59e63c612d7d9674f0057b4cf246726b4da2f57999c5ebac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextcloud-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49b707040d71b3da11b82122e52723a5f64ca6b9384db7ab5b48995623e258af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4829 Malicious code in nextcloud-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49b707040d71b3da11b82122e52723a5f64ca6b9384db7ab5b48995623e258af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nylas-mail-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cc8ea198e81b0fc8307cbea75e5735d219ac373362c7748102cb514207959d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4989 Malicious code in nylas-mail-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cc8ea198e81b0fc8307cbea75e5735d219ac373362c7748102cb514207959d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3756 Malicious code in icons-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5044c44aa1d6f9b455bbd96420485e2d7aa4dee38d050a7ebdcb96dbd10fd65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icons-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5044c44aa1d6f9b455bbd96420485e2d7aa4dee38d050a7ebdcb96dbd10fd65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...