PT-2018-13129

Name of the Vulnerable Software and Affected Versions Bloop Airmail 3 version 3.5.9 Description An issue in the "send" command of the airmail:// URL scheme allows external applications to send arbitrary emails from an active account without user prompt. The command accepts URL parameters with the...

CVE-2018-15668: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...

CVE-2018-14926

Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request...

CVE-2018-14430

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fwdata id1, fwdata id2, fwdata id3, fwdata id4, or email field of the contact form, exploitable with an fwsendemail action to wp-admin/admin-ajax.php...

PT-2018-12508

Name of the Vulnerable Software and Affected Versions Mondula Multi Step Form plugin versions prior to 1.2.6 Description The issue allows for XSS exploitation via specific fields in the contact form, including fw data id1, fw data id2, fw data id3, fw data id4, or the email field. This can be...

PT-2018-4221

Name of the Vulnerable Software and Affected Versions Scheme 48 affected versions not specified Description The issue allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp, specifically through the scheme48-send-definition function in cmuscheme48.el...

Security fix for the ALT Linux 8 package curl version 7.61.0-alt1

July 17, 2018 Anton Farygin 7.61.0-alt1 - 7.61.0 - fixes: CVE-2018-0500 SMTP send heap buffer overflow...

CVE-2018-7770: Improper Limitation of a Pathname to a Restricted Directory

The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address...

CVE-2018-10658

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service crash. The crash arises from code inside libdbus-send.so shared object or similar...

CVE-2018-12684

Out-of-bounds Read in the sendssifile function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file...

PT-2018-11329

Name of the Vulnerable Software and Affected Versions CivetWeb versions prior to 1.11 Description The issue is related to an out-of-bounds read in the send ssi file function, which can be triggered by a crafted SSI file. This can lead to a Denial of Service or Information Disclosure...

CVE-2018-6563

Multiple cross-site request forgery CSRF vulnerabilities in totemomail Encryption Gateway before 6.0.0Build371 allow remote attackers to hijack the authentication of users for requests that 1 change user settings, 2 send emails, or 3 change contact information by leveraging lack of an anti-CSRF...

RUSTSEC-2018-0019 Multiple memory safety issues

Affected versions contain multiple memory safety issues, such as: - Unsoundly coercing immutable references to mutable references - Unsoundly extending lifetimes of strings - Adding the Send marker trait to objects that cannot be safely sent between threads This may result in a variety of memory...

Multiple memory safety issues

Affected versions contain multiple memory safety issues, such as: - Unsoundly coercing immutable references to mutable references - Unsoundly extending lifetimes of strings - Adding the Send marker trait to objects that cannot be safely sent between threads This may result in a variety of memory...

PT-2018-15607

Name of the Vulnerable Software and Affected Versions actix-web versions prior to 0.7.15 Description The issue concerns multiple memory safety problems, including unsoundly coercing immutable references to mutable references, unsoundly extending lifetimes of strings, and adding the Send marker...

PT-2018-15606

Name of the Vulnerable Software and Affected Versions actix-web crate versions prior to 0.7.15 Description The issue concerns multiple memory safety problems, including unsoundly coercing immutable references to mutable references, unsoundly extending lifetimes of strings, and adding the Send...

totemomail Encryption Gateway Cross-Site Request Forgery Vulnerability

totemomail Encryption Gateway is a gateway for email encryption. A cross-site request forgery vulnerability exists in versions prior to totemomail Encryption Gateway 6.0.0Build371. A remote attacker can exploit this vulnerability to change user settings, send emails, or change contact information...

MMM mmm_agentd shell command injection vulnerability

MySQL Multi-Master Replication Manager MMM is a set of flexible scripts that performs monitoring/failover and management of MySQL master-master replication configurations. mmmagentd is an agent daemon that runs on each MySQL server and provides a simple set of remote services to the monitoring...

pythonidae.nl XSS vulnerability

Open Bug Bounty ID: OBB-617985 Description| Value ---|--- Affected Website:| pythonidae.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

openthread/ip6-send-fuzzer: Index-out-of-bounds in ot::RouterTable::Allocate

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5375666315853824 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Crash Type:...