Lucene search
+L

107 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•4 views

Malicious code in Be.Vlaandеren.Basisregisters.PostalRegistry.Apі.Extract (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•5 views

Malicious code in Be.Vlaanԁeren.Basisregisters.PostalRegistry.Apі.Legacy (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•5 views

Malicious code in Be.Vlaanԁeren.Basisregisters.PostalRegistry.Proјector (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•5 views

Malicious code in Be.Vlaanԁeren.Bаsisregisters.PostalRegistry.Proјeсtor (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:24 p.m.•8 views

Malicious code in Be.Vlаanderen.Basisregisters.PоstаlRegistrу.Api.Oslo (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:24 p.m.•6 views

Malicious code in Be.Vlаandеren.Basisregisters.PostаlRegistry.Apі.Extract (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:23 p.m.•7 views

Malicious code in Bе.Vlaanderen.Bаsisregisters.PostalRеgistry.Api.CrаbImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/06/24 12:00 a.m.•21 views

CVE-2024-34991

In the module "Axepta" axepta before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information expiry date / postal address / email / etc. without restriction due to a lack of permissions control...

6.5AI score0.00379EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/04/22 2:54 p.m.•16 views

WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability

Sensitive Data Exposure via Log File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin USPS Shipping for WooCommerce – Live Rates versions = 1.9.4...

5.3CVSS7AI score0.00365EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/10 2:11 p.m.•20 views

WordPress USPS Shipping for WooCommerce plugin <= 1.9.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin USPS Shipping for WooCommerce – Live Rates versions = 1.9.2...

4.3CVSS7AI score0.00188EPSS
SaveExploits0Affected Software1
HackRead
HackRead
•added 2024/03/28 9:15 p.m.•20 views

New iMessage Phishing Campaign Targets Postal Service Users Globally

By Waqas Some of the known targets of this iMessage phishing campaign are USPS the United States Postal Service, DHL, Evri, Australia Post, Bulgarian Posts, and Singapore Post. This is a post from HackRead.com Read the original post: New iMessage Phishing Campaign Targets Postal Service Users...

7.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2024/03/11 9:18 p.m.•33 views

CVE-2024-27938 SMTP Smuggling in Postal

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from ...

5.3CVSS5.5AI score0.00664EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/03/11 9:18 p.m.•23 views

CVE-2024-27938 SMTP Smuggling in Postal

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from ...

5.3CVSS6.8AI score0.00664EPSS
SaveExploits1References4
CVE
CVE
•added 2024/03/11 9:18 p.m.•121 views

CVE-2024-27938

CVE-2024-27938 concerns Postal, an open source SMTP server. The vulnerability affects Postal versions older than 3.0.0 and enables SMTP Smuggling, potentially allowing an incoming email to be spoofed as if sent from a server the recipient user authorized. The impact is limited to inbound mail flo...

5.3CVSS5.2AI score0.00664EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2024/03/11 9:18 p.m.•2 views

CVE-2024-27938

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from ...

6.9CVSS0.00664EPSS
SaveExploits1References6
OSV
OSV
•added 2024/03/11 9:18 p.m.•28 views

CVE-2024-27938 SMTP Smuggling in Postal

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from ...

5.3CVSS5.4AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/11 12:00 a.m.•10 views

CVE-2024-27938: Improper Encoding or Escaping of Output

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from ...

5.3CVSS5.6AI score0.00664EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/11 12:00 a.m.•20 views

Postal security breach

Postal is Postal open source a complete and fully functional mail server . It is intended for use by Web sites and Web servers. A security vulnerability exists in Postal versions prior to 3.0 that stems from vulnerability to SMTP smuggling attacks, allowing attackers to spoof incoming e-mail...

5.3CVSS6.7AI score0.00664EPSS
SaveExploits1References5
Wired Threat Level
Wired Threat Level
•added 2024/01/20 6:00 p.m.•32 views

Fujitsu Bugs That Sent Innocent People to Prison Were Known ‘From the Start’

Software flaws were allegedly hidden from lawyers of wrongly convicted UK postal workers...

7.5AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2023/12/13 12:04 p.m.•14 views

Surveillance by the US Postal Service

This is not about mass surveillance of mail, this is about the sorts of targeted surveillance the US Postal Inspection Service uses to catch mail thieves: To track down an alleged mail thief, a US postal inspector used license plate reader technology, GPS data collected by a rental car company,...

7.1AI score
SaveExploits0
Rows per page
Query Builder