Lucene search
+L

62 matches found

RedHat Linux
RedHat Linux
added 2026/07/06 3:02 p.m.11 views

RabbitMQ: RabbitMQ: Persistent foreign bindings allow unauthorized message routing

A flaw was found in RabbitMQ, a messaging and streaming broker. This vulnerability allows an attacker to establish persistent foreign bindings to reply-to destinations. This occurs because temporary queues are not properly removed, leaving behind active routing entries. This can lead to...

8.8CVSS5.8AI score0.00652EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
added 2026/07/06 3:02 p.m.9 views

RabbitMQ: RabbitMQ: Persistent foreign bindings allow unauthorized message routing

A flaw was found in RabbitMQ, a messaging and streaming broker. This vulnerability allows an attacker to establish persistent foreign bindings to reply-to destinations. This occurs because temporary queues are not properly removed, leaving behind active routing entries. This can lead to...

8.8CVSS5.8AI score0.00652EPSS
SaveExploits1References10
NVD
NVD
added 2026/07/01 5:16 a.m.26 views

CVE-2026-12127

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences 'CRLF Injection' in all versions up to, and including, 1.10.2 This is due to getreplytoaddress processing the Reply-To...

5.3CVSS0.00595EPSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2026/07/01 4:32 a.m.30 views

CVE-2026-12127

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences 'CRLF Injection' in all versions up to, and including, 1.10.2 This is due to getreplytoaddress processing the Reply-To...

5.3CVSS5.9AI score0.00595EPSS
SaveExploits0References12
CVE
CVE
added 2026/07/01 4:32 a.m.45 views

CVE-2026-12127

WPForms – Easy Form Builder for WordPress (WordPress plugin WPForms Lite) versions up to 1.10.2 are vulnerable to CRLF header injection in outgoing notification emails. The root cause is improper neutralization of CRLF sequences: get_reply_to_address() expands the Reply-To display name with conte...

5.3CVSS5.9AI score0.00595EPSS
SaveExploits0References11
EUVD
EUVD
added 2026/07/01 4:32 a.m.19 views

EUVD-2026-40907

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences 'CRLF Injection' in all versions up to, and including, 1.10.2 This is due to getreplytoaddress processing the Reply-To...

5.3CVSS5.9AI score0.00595EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2026/07/01 4:32 a.m.61 views

CVE-2026-12127 WPForms <= 1.10.2 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via Reply-To Display Name

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences 'CRLF Injection' in all versions up to, and including, 1.10.2 This is due to getreplytoaddress processing the Reply-To...

5.3CVSS0.00595EPSS
SaveExploits0References11
OSV
OSV
added 2026/06/16 12:37 p.m.10 views

BIT-DISCOURSE-2026-44785 Discourse: Hidden reply-to post raw can be disclosed through AI explain prompts

Discourse is an open-source discussion platform. From versions 2026.1.0 to before 2026.1.4, 2026.3.0 to before 2026.3.1, and 2026.4.0 to before 2026.4.1, the AI "explain" helper only checks cansee? on the post being explained, not its replytopost, so any authenticated user with access to the AI...

4.3CVSS5.3AI score0.00189EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/11 5:04 a.m.57 views

CVE-2026-40999 Spring WS SSRF via unvalidated WS-Addressing reply destinations

When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to destinations taken directly from request headers without verifying that those destinations are safe to connect to. Affect...

8.6CVSS0.00383EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/11 5:04 a.m.16 views

CVE-2026-40999 Spring WS SSRF via unvalidated WS-Addressing reply destinations

When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to destinations taken directly from request headers without verifying that those destinations are safe to connect to. Affect...

8.6CVSS5.4AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/11 5:04 a.m.20 views

EUVD-2026-36209

When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to destinations taken directly from request headers without verifying that those destinations are safe to connect to. Affect...

8.6CVSS5.4AI score0.00383EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:42 a.m.15 views

CVE-1999-0207

Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command...

7.5CVSS7.5AI score0.08717EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-1999-0207

Malware in sbrugna...

7.5CVSS6.4AI score0.08717EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:59 a.m.12 views

CVE-2024-6224

The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

5.9CVSS5.8AI score0.00207EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/12 3:15 a.m.24 views

CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS5.3AI score0.00325EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/12 2:07 a.m.56 views

CVE-2024-49394 Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

5.3CVSS0.00325EPSS
SaveExploits0References5
CVE
CVE
added 2024/11/12 2:07 a.m.83 views

CVE-2024-49394

CVE-2024-49394 affects mutt and neomutt: the In-Reply-To header is not cryptographically signed, enabling an attacker to impersonate the sender by reusing an unencrypted but signed email. Public references in the connected documents show multiple advisories addressing this issue and releasing fix...

5.3CVSS5.1AI score0.00325EPSS
SaveExploits0References5Affected Software2
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.9 views

Mutt 安全漏洞

Mutt is a text-based e-mail client for Unix-like systems developed by Michael Elkins. A security vulnerability exists in Mutt that stems from the In-Reply-To email header field not being protected by a cryptographic signature, which allows an attacker to reuse unencrypted but signed email message...

5.3CVSS5.3AI score0.00325EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/30 6:15 a.m.9 views

CVE-2024-6223

The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.8AI score0.00405EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/07/30 6:00 a.m.33 views

CVE-2024-6223 Send email only on Reply to My Comment <= 1.0.6 - Reflected XSS

The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00405EPSS
SaveExploits1References1
Rows per page
Query Builder