CVE-2026-49141

WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contactid in the POST request body without tenant ownership...

totemomail Encryption Gateway Cross-Site Request Forgery Vulnerability

totemomail Encryption Gateway is a gateway for email encryption. A cross-site request forgery vulnerability exists in versions prior to totemomail Encryption Gateway 6.0.0Build371. A remote attacker can exploit this vulnerability to change user settings, send emails, or change contact information...

Apple OS X El Capitan Messages Contact List Modification Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. Apple OS X El Capitan Messages has a security vulnerability that allows an attacker to modify other users' contact lists...

CVE-2016-1844

The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors...