277 matches found
GHSA-WWV8-CQPR-VX3M Modoboa has OS Command Injection
Summary execcmd in modoboa/lib/sysutils.py always runs subprocess calls with shell=True. Since domain names flow directly into shell command strings without any sanitization, a Reseller or SuperAdmin can include shell metacharacters in a domain name to run arbitrary OS commands on the server...
Modoboa has OS Command Injection
Summary execcmd in modoboa/lib/sysutils.py always runs subprocess calls with shell=True. Since domain names flow directly into shell command strings without any sanitization, a Reseller or SuperAdmin can include shell metacharacters in a domain name to run arbitrary OS commands on the server...
Modoboa 操作系统命令注入漏洞
Modoboa is a mail hosting and management platform developed by the Modoboa team. Versions of Modoboa prior to 2.7.1 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the execcmd function always running child processes with shell=True, and it...
PT-2026-28089
Modoboa is a mail hosting and management platform. Prior to version 2.7.1, exec cmd in modoboa/lib/sysutils.py always runs subprocess calls with shell=True. Since domain names flow directly into shell command strings without any sanitization, a Reseller or SuperAdmin can include shell...
EUVD-2019-0087
Malware in sbrugna...
EUVD-2023-0172
Malicious code in bioql PyPI...
EUVD-2023-0167
Malicious code in bioql PyPI...
EUVD-2023-0173
Malicious code in bioql PyPI...
EUVD-2023-0170
Malicious code in bioql PyPI...
EUVD-2023-0174
Malicious code in bioql PyPI...
EUVD-2023-0775
Malicious code in bioql PyPI...
EUVD-2023-0169
Malicious code in bioql PyPI...
EUVD-2023-0175
Malicious code in bioql PyPI...
EUVD-2023-0164
Malicious code in bioql PyPI...
EUVD-2023-0165
Malicious code in bioql PyPI...
EUVD-2023-0166
Malicious code in bioql PyPI...
EUVD-2023-0163
Malicious code in bioql PyPI...
CVE-2023-0406
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.0.4...