CVE-2025-29557

CVE-2025-29557 – كشف بيانات الاعتماد عبر واجهة برمجة تطبيقات تكوين البريد في ExaGrid 📝 نظرة عامة عنوان الثغرة : كشف بيانات اعتماد SMTP عبر واجهة برمجة تطبيقات تكوين البريد المنتج : جهاز النسخ الاحتياطي ExaGrid EX10 الإصدارات المتأثرة : 6.3 – 7.0.1.P08 معرف CVE : CVE-2025-29557 الخطورة : عالية ناق...

EUVD-2025-23280

Malicious code in bioql PyPI...

CVE-2025-29557

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where users with operator-level privileges can issue an HTTP request to retrieve SMTP credentials, including plaintext passwords...

CVE-2025-29557

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where users with operator-level privileges can issue an HTTP request to retrieve SMTP credentials, including plaintext passwords...

CVE-2025-29557: Improper Access Control

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where users with operator-level privileges can issue an HTTP request to retrieve SMTP credentials, including plaintext passwords...

PT-2025-31526 · Exagrid · Exagrid Ex10

Name of the Vulnerable Software and Affected Versions: ExaGrid EX10 versions 6.3 through 7.0.1.P08 Description: The software is susceptible to incorrect access control. Users with operator-level privileges can retrieve SMTP credentials, including plaintext passwords, by issuing an HTTP request to...

CVE-2025-29557

The ExaGrid EX10 backup storage appliance (versions 6.3 through 7.0.1.P08 ) is vulnerable to Incorrect Access Control within the MailConfiguration API endpoint. Authenticated users with operator-level privileges can issue an HTTP GET request to this endpoint to retrieve sensitive SMTP configurati...