CVE-2017-18403

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

EUVD-2017-9519

Malware in sbrugna...

EUVD-2016-1786

Malware in sbrugna...

The vulnerability of the implementation of the “hyperkitty-permissions.sh” web interface for accessing Mailman archives in HyperKitty allows a perpetrator to increase their privileges.

The vulnerability of the “hyperkitty-permissions.sh” web interface implementation for accessing Mailman archives in HyperKitty relates to the tracking of symbolic links. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Postorius-permissions.sh web interface implementation allows a hacker to escalate their privileges.

The vulnerability of the Postorius-permissions.sh web interface implementation for accessing Mailman archives is related to the tracking of symbolic links. Exploiting this vulnerability could allow an attacker to increase their privileges...

CVE-2016-10792

cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives SEC-141...

CVE-2016-10792

cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives SEC-141...

CVE-2017-18403

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

Code injection

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

CVE-2017-18403

CVE-2017-18403 affects cPanel prior to 68.0.15. The vulnerability allows code execution in the context of the nobody account via Mailman archives (SEC-337). Impact details in the provided documents indicate a potential compromise of systems running affected cPanel versions. The recommended remedi...

Mailman/Pipermail private mailing list/local user vulnerability

There is a vulnerability in Pipermail mailing list archiving software distributed with and integrated with Mailman, that affects you if you have local users on the machine. If you have a private Mailman mailing lists and b user logins on the same machine, any local user can read the archives of...