CVE-2020-37090: Unrestricted Upload of File with Dangerous Type

School ERP Pro 1.0 contains a file upload vulnerability that allows students to upload arbitrary PHP files to the messaging system. Attackers can upload malicious PHP scripts through the message attachment feature, enabling remote code execution on the server...

TMS code-related vulnerabilities

TMS is a channel-based team communication and collaboration tool developed by Weicheng’s individual developers, along with a lightweight task board. Versions of TMS 2.28.0 and earlier contained code vulnerabilities. These vulnerabilities stemmed from incorrect handling of the parameter filename i...

Linux Distros Unpatched Vulnerability : CVE-2026-0881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147. CVE-2026-0881 Note that Nessus relies on the...

SUSE CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

Mozilla Firefox < 147.0

The version of Firefox installed on the remote Windows host is prior to 147.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-01 advisory. - Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability affects Firefox 147 and Thunderbird 147...

UBUNTU-CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability affects Firefox 147 and Thunderbird 147...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0881 Sandbox escape in the Messaging System component

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0881

A sandbox escape vulnerability exists in the Messaging System component of Mozilla Firefox and the Thunderbird email client. The flaw originates from a weakness in data protection mechanisms , which could allow an attacker to bypass security restrictions and execute arbitrary code remotely . This...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability affects Firefox 147 and Thunderbird 147...

CVE-2026-0881 Sandbox escape in the Messaging System component

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

PT-2026-2643

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147 Description A sandbox escape exists within the Messaging System component. This allows for a potential security compromise. Recommendations Update Firefox to version 147 or later...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox prior to version 147, which stems from a sandbox escape in the Messaging System component...

CVE-2026-0881: Improper Access Control

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

PT-2026-21710

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description A privilege escalation issue exists in the Messaging Syste...

CVE-2021-47737

CSZ CMS 1.2.7 contains an HTML injection vulnerability that allows authenticated users to insert malicious hyperlinks in message titles. Attackers can craft POST requests to the member messaging system with HTML-based links to potentially conduct phishing or social engineering attacks...