PYSEC-2026-658 Mailman Sensitive Information Disclosure

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...

PYSEC-2026-660 Cross Site Request Forgery in mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

Ubuntu 16.04 LTS / 20.04 LTS : Mailman vulnerability (USN-8067-1)

The remote Ubuntu 16.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8067-1 advisory. It was discovered that Mailman incorrectly handled CSRF tokens. A remote list member or moderator could possibly use their own token to craft an admin...

MiracleLinux 4 : mailman-2.1.12-14.AXS4.2 (AXSA:2011-73:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-73:01 advisory. Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing...

EUVD-2020-4452

Malware in sbrugna...

EUVD-2006-0060

Malware in sbrugna...

EUVD-2005-4148

Malware in sbrugna...

EUVD-2018-1428

Malware in sbrugna...

EUVD-2000-0697

Malware in sbrugna...

EUVD-2001-0290

Malware in sbrugna...

EUVD-2004-0182

Malware in sbrugna...

EUVD-2003-0981

Malware in sbrugna...

EUVD-2004-1141

Malware in sbrugna...

EUVD-2003-0955

Malware in sbrugna...

EUVD-2006-2938

Malware in sbrugna...

EUVD-2016-7778

Malware in sbrugna...

EUVD-2001-1113

Malware in sbrugna...

EUVD-2022-1824

Malicious code in bioql PyPI...

EUVD-2022-1762

Malicious code in bioql PyPI...

EUVD-2025-12590

Malicious code in bioql PyPI...