EUVD-2026-90515

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

HGiga C&Cm@il 访问控制错误漏洞

HGiga C&Cm@il is an email collaboration system developed by China’s HGiga Corporation. There is an access control vulnerability in HGiga C&Cm@il, which stems from the lack of authentication. This vulnerability could allow unverified remote attackers to read and modify the email content of any use...

EUVD-2025-28710

Malicious code in bioql PyPI...

Unspecified Vulnerability in Citadel WebCit

WebCit is the Citadel Servlet engine. A security vulnerability exists in Citadel WebCit 926 and earlier versions. A remote authentication attacker can exploit this vulnerability to read someone's email via the msgconfirmmove template...

paid-to-read-email.com XSS vulnerability

Open Bug Bounty ID: OBB-441688 Description| Value ---|--- Affected Website:| paid-to-read-email.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Android Vulnerability Bypasses App's Digital Signature

A vulnerability exists in the Android code base that would allow a hacker to modify a legitimate, digitally signed Android application package file APK and not break the app’s cryptographic signature—an action that would normally set off a red flag that something is amiss. Researchers at startup...

CVE-2006-2917: Undefined Security Weakness

Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the 1 CREATE, 2 SELECT, 3 DELETE, ...

CVE-2003-1080: Undefined Security Weakness

Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of other users...

CVE-2000-0318: Undefined Security Weakness

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...

CVE-1999-0850: Undefined Security Weakness

The default permissions for Endymion MailMan allow local users to read email or modify files...

CVE-1999-0850

The default permissions for Endymion MailMan allow local users to read email or modify files...