CVE-2026-123664

A security flaw in nasa-gcn gcn.nasa.gov (up to commit b299b562af665878964b981a459f0a9c04b11adf ) affects the Email Notification Handler component. The vulnerability arises from improper processing of the /user/email file, where manipulating the Recipient argument leads to improper authorization ...

EUVD-2026-118271

A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf. This issue affects some unknown processing of the file /user/email of the component Email Notification Handler. Performing a manipulation of the argument Recipient results in improper...

CVE-2026-121968

A flaw was found in netrek-client-cow. An attacker controlling a server or intercepting network traffic can trigger an out-of-bounds read by sending a specially crafted message containing an invalid recipient index. This issue causes the client application to crash, resulting in a Denial of Servi...

CVE-2026-123664: nasa-gcn gcn.nasa.gov: A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf

A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf. This issue affects some unknown processing of the file /user/email of the component Email Notification Handler. Performing a manipulation of the argument Recipient results in improper...

CVE-2026-121426

A flaw was found in Nodemailer. This vulnerability allows a remote attacker to cause information disclosure by bypassing recipient address restrictions. Due to improper parsing of email addresses containing angle brackets within quoted sections, the parser misidentifies the intended destination...

CVE-2026-121426

The Nodemailer library (versions 3.0.0 to 10.1.4) contains an address parsing vulnerability within the addressparser component. The flaw occurs because the parser incorrectly ends an angle-addr at a ">> ** character found inside a quoted local part, comment, or domain literal. This allows a...

CVE-2026-121425

Nodemailer versions 3.0.0 before 10.1.4 are vulnerable to a Recipient Injection flaw due to a parsing issue in the addressparser component. The vulnerability occurs because the parser incorrectly ends an RFC 5322 group at a semicolon located inside quoted display names or comments. This allows an...

CVE-2026-121425 Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing

Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a semicolon inside quoted display names or comments. Attackers can submit crafted group addresses that conformant validators approve, redirecting mail to attacker-chosen recipients and...

CVE-2026-121425 Nodemailer 3.0.0 before 10.1.4 Recipient Injection via addressparser Group Parsing

Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a semicolon inside quoted display names or comments. Attackers can submit crafted group addresses that conformant validators approve, redirecting mail to attacker-chosen recipients and...

CVE-2026-120330 Broken Access Control in extension "Mail" (mail)

Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the requested mail or recipient group. Backend users with access to the mail module can view, change, send and export mails and recipient groups outside their web mounts, including t...

CVE-2026-121424: nodemailer: Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote…

Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to redirect recipients by ending nested RFC 5322 comments at the first closing parenthesis. Attackers can submit addresses whose nested comment hides an attacker address,...

CVE-2026-120330: TYPO3 Extension "Mail": Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the…

Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the requested mail or recipient group. Backend users with access to the mail module can view, change, send and export mails and recipient groups outside their web mounts, including t...

CVE-2026-121425: nodemailer: Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a semicolon…

Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a semicolon inside quoted display names or comments. Attackers can submit crafted group addresses that conformant validators approve, redirecting mail to attacker-chosen recipients and...

PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim MNEMO-CERT has developed a PoC that allows executing commands with elevated privileges by exploiting the vulnerability CVE-2019-10149, which affects different versions of Exim 4.87 - 4.91. To perform local exploitation of this vulnerability it is necessary to define the...

CVE-2019-10149

CVE-2019-10149 CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution. Example nc -lvp 9000 python ./CVE-2019-10149/exploit.py --rhost example.com --rport...

CVE-2026-118100

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before exporting its configuration, allowing unauthenticated users to download any form's stored settings, including notification recipient email addresses and reCAPTCHA secret keys that ar...

EUVD-2026-113730

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before exporting its configuration, allowing unauthenticated users to download any form's stored settings, including notification recipient email addresses and reCAPTCHA secret keys that ar...

CVE-2026-118100 BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before exporting its configuration, allowing unauthenticated users to download any form's stored settings, including notification recipient email addresses and reCAPTCHA secret keys that ar...

CVE-2026-118100

The BuddyForms WordPress plugin in versions before 2.10.3 is vulnerable to an unauthenticated form configuration disclosure. The root cause is a failure to verify if a requester is authorized to manage a form before exporting its configuration. This allows unauthenticated users to download stored...

CVE-2026-118100 BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before exporting its configuration, allowing unauthenticated users to download any form's stored settings, including notification recipient email addresses and reCAPTCHA secret keys that ar...