EUVD-2024-51456

Malicious code in bioql PyPI...

EUVD-2025-8168

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2016-10074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mail transport aka SwiftTransportMailTransport in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and...

Malicious code in mailer-bal (npm)

The package mailer-bal was found to contain malicious code...

Malicious code in @amber-team/deploy-to-mailer (npm)

The package @amber-team/deploy-to-mailer was found to contain malicious code...

MAL-2025-7053 Malicious code in @amber-team/deploy-to-mailer (npm)

The package @amber-team/deploy-to-mailer was found to contain malicious code...

Malicious code in yandex-mailer (npm)

The package yandex-mailer was found to contain malicious code...

Malicious code in ic-tools-mailer (npm)

The package ic-tools-mailer was found to contain malicious code...

MAL-2025-25790 Malicious code in mailer-bal (npm)

The package mailer-bal was found to contain malicious code...

MAL-2025-40218 Malicious code in yandex-mailer (npm)

The package yandex-mailer was found to contain malicious code...

MAL-2025-22883 Malicious code in ic-tools-mailer (npm)

The package ic-tools-mailer was found to contain malicious code...

CVE-2024-28859

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...

CVE-2024-56003

Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer caldera-smtp-mailer.This issue affects Caldera SMTP Mailer: from n/a through = 1.0.1...

CVE-2023-3178

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the managepostmansmtp capability delete arbitrary logs via a CSRF attack...

CVE-2023-3179

The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the managepostmansmtp capability resend an email to an arbitrary address for example a password reset email could be resent to an...

CVE-2023-52233

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

CVE-2023-5958

The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users...

CVE-2023-6629

The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘msg’ parameter in all versions up to, and including, 2.8.6 due to insufficient input sanitization and output escaping. Th...

CVE-2022-2351

The Post SMTP Mailer/Email Log WordPress plugin before 2.1.4 does not escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unfilteredhtml capability is disallowed...

CVE-2022-2370

The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS code for the settings, allowing any authenticated users, such as subscriber to retrieve them...