Ubuntu 16.04 LTS / 20.04 LTS : Mailman vulnerability (USN-8067-1)

The remote Ubuntu 16.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8067-1 advisory. It was discovered that Mailman incorrectly handled CSRF tokens. A remote list member or moderator could possibly use their own token to craft an admin...

MiracleLinux 4 : mailman-2.1.12-14.AXS4.2 (AXSA:2011-73:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-73:01 advisory. Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing...

EUVD-2001-1113

Malware in sbrugna...

EUVD-2006-2938

Malware in sbrugna...

EUVD-2000-0697

Malware in sbrugna...

EUVD-2004-0182

Malware in sbrugna...

EUVD-2004-1141

Malware in sbrugna...

EUVD-2018-1428

Malware in sbrugna...

EUVD-2016-7778

Malware in sbrugna...

EUVD-2005-4148

Malware in sbrugna...

EUVD-2020-4452

Malware in sbrugna...

EUVD-2003-0955

Malware in sbrugna...

EUVD-2003-0981

Malware in sbrugna...

EUVD-2006-0060

Malware in sbrugna...

EUVD-2001-0290

Malware in sbrugna...

EUVD-2022-1824

Malicious code in bioql PyPI...

EUVD-2025-12590

Malicious code in bioql PyPI...

EUVD-2022-1762

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-44227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make...

CVE-2025-53882 The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1...