64 matches found
CVE-2026-83778
A heap-based buffer overflow vulnerability exists in the Microsoft Internet Messaging API . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a high severity rating (CVSS 8.8) and requires user interaction. No specific exploit details...
CVE-2026-83919
A heap-based buffer overflow exists in the Microsoft Internet Messaging API . This vulnerability allows an authorized attacker to achieve local code execution . No specific versions are listed as affected, and no exploit information is provided in the documents. Remediation is indicated as an off...
CVE-2026-10523-Ivanti-sentry
CVE-2026-10523 - Ivanti Sentry RCE Detection Tool A comprehensive proof-of-concept detection tool for testing Ivanti Sentry vulnerabilities related to authentication bypass and remote code execution. This tool identifies systems vulnerable to CVE-2026-10520 and CVE-2026-10523. Overview This proje...
SmarterMail < 100.0.9526 XSS (CVE-2026-26930)
The version of SmarterTools SmarterMail installed on the remote host is prior to 100.0.9526. It is, therefore, affected by a cross-site scripting vulnerability: - SmarterTools SmarterMail before build 9526 allows XSS via MAPI requests. CVE-2026-26930 Note that Nessus has not tested for this issue...
CVE-2026-26930
SmarterTools SmarterMail before 9526 allows XSS via MAPI requests...
CVE-2026-26930
SmarterTools SmarterMail before 9526 allows XSS via MAPI requests...
SmarterTools SmarterMail 安全漏洞
SmarterTools SmarterMail is a set of email server software developed by SmarterTools Corporation. This software supports features such as spam filtering, data statistics, and Simple Mail Transfer Protocol SMTP authentication. Previous versions of SmarterTools SmarterMail version 9526 had security...
PT-2026-8360
Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions prior to 9526 Description SmarterTools SmarterMail is susceptible to a cross-site scripting XSS issue through MAPI requests. The issue allows for the injection of malicious scripts via crafted MAPI requests...
SUSE CVE-2025-11719
Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability was fixed in Firefox 144 and Thunderbird 144...
CVE-2025-11719: Use After Free
Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption. This vulnerability was fixed in Firefox 144 and Thunderbird 144...
PT-2025-41907
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144 Description A flaw exists in Firefox and Thunderbird where the use of the native messaging API by web extensions on Windows may result in crashes due to use-after-free memory...
EUVD-2014-2185
Malware in sbrugna...
EUVD-2022-4511
Malicious code in bioql PyPI...
SUSE CVE-2015-5331
Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...
Malicious Package
Overview @uieng/messaging-api is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk...
Moodle improper access control
Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...
GHSA-M7CC-6VHG-39WR Moodle improper access control
Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API...
Microsoft Windows Multiple Vulnerabilities (KB5001335)
This host is missing a critical security update according to Microsoft KB5001335 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
