CVE-2026-45711

CVE-2026-45711 affects Mailpit and its dump --http sub-command. Before version 1.30.0, Mailpit can write attacker-controlled bytes to arbitrary filesystem paths by using the message ID from the remote server response to construct the output path (path.Join) which normalizes ".." segments. A malic...

EUVD-2026-45006

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross-user content oracle. By using the ESEARCH command, an authenticated IMAP user could enumerate folder names under any account they could name. Search would return UIDs of messages matching the search,...

PT-2026-60551

Name of the Vulnerable Software and Affected Versions cyrus-imapd versions prior to 3.12.3 Description An authenticated IMAP user can utilize the ESEARCH command to enumerate folder names under any specified account. This creates a content oracle, where the search returns UIDs of messages that...

CVE-2026-47083

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross-user content oracle. By using the ESEARCH command, an authenticated IMAP user could enumerate folder names under any account they could name. Search would return UIDs of messages matching the search,...

CVE-2026-56770

libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote attackers can crash services or vessel systems by sending crafted AIVDM sentences over VHF marine radio or IP feeds,...

Mail MCP Bridge 路径遍历漏洞

Mail MCP Bridge is a messaging analysis tool developed by Fatbobman Dongpo Zhouzi, which connects macOS email messages with AI. Versions of Mail MCP Bridge 1.3.3 and earlier have a path traversal vulnerability. This vulnerability stems from improper handling of the parameter messageids in the fil...

CVE-2026-4815

A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls0messageids' parameter in '/supportboard/include/ajax.php' endpoint...

CVE-2026-4815 SQL Injection vulnerability in Support Board

A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls0messageids' parameter in '/supportboard/include/ajax.php' endpoint...

Support Board SQL注入漏洞

Support Board is a sales chat software developed by the British company Support Board. Version 3.7.7 of Support Board contains an SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter calls0messageids in the file /supportboard/include/ajax.php, which may...

CVE-2025-58402

The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET request, an attacker can access messages and attachments belonging to other users...

CVE-2025-13295

Insertion of Sensitive Information Into Sent Data vulnerability in Argus Technology Inc. BILGER allows Choosing Message Identifier.This issue affects BILGER: before 2.4.9...

Towards Ultra-Low Latency: Binarized Neural Network Architectures for In-Vehicle Network Intrusion Detection

The Control Area Network CAN protocol is essential for in-vehicle communication, facilitating high-speed data exchange among Electronic Control Units ECUs. However, its inherent design lacks robust security features, rendering vehicles susceptible to cyberattacks. While recent research has...

Linux Distros Unpatched Vulnerability : CVE-2023-28366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with...

GHSA-JXR6-QRXX-2PH2

creationtimestamp| type| source ---|---|--- 2025-07-31 19:54:33+00:00| seen| https://t.me/ctinow/235813 2025-07-31 19:59:50+00:00| seen| https://t.me/ctinow/235814...

RHSA-2025:0878

creationtimestamp| type| source ---|---|--- 2025-02-27 01:26:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5635 2025-04-16 18:56:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12130...

CVE-2023-6525

creationtimestamp| type| source ---|---|--- 2024-03-16 04:21:35+00:00| seen| https://t.me/ctinow/209321 2024-03-16 04:26:04+00:00| seen| https://t.me/ctinow/209324...

CVE-2024-1328

creationtimestamp| type| source ---|---|--- 2024-03-12 10:26:35+00:00| seen| https://t.me/ctinow/205474 2024-03-12 10:26:56+00:00| seen| https://t.me/ctinow/205491...

CVE-2024-22457

creationtimestamp| type| source ---|---|--- 2024-03-01 12:31:53+00:00| seen| https://t.me/ctinow/197553 2024-03-01 12:31:57+00:00| seen| https://t.me/ctinow/197557...

CVE-2024-26152

creationtimestamp| type| source ---|---|--- 2024-02-22 21:37:58+00:00| published-proof-of-concept| https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6xv9-957j-qfhg 2024-02-22 23:26:35+00:00| seen| https://t.me/ctinow/191274 2024-02-22 23:26:40+00:00| seen|...

CVE-2024-20750

creationtimestamp| type| source ---|---|--- 2024-02-15 14:32:24+00:00| seen| https://t.me/ctinow/185566 2024-03-06 09:06:30+00:00| seen| https://t.me/ctinow/201130...