1442 matches found
WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce Plugin <= 2.6.14 is vulnerable to Cross Site Scripting (XSS)
Software Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce Type Plugin Vulnerable versions = 2.6.14 Fixed in 2.6.16 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43126 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...
Medium: nerdctl
Issue Overview: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of da...
OESA-2024-1926 exim security update
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
OESA-2024-1928 exim security update
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
WordPress Sender plugin <= 2.6.18 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce versions = 2.6.18...
SMTP 安全漏洞
SMTP is a complete e-mail delivery suite for SMTP. A security vulnerability exists in SMTP that stems from the fact that the hosting service does not validate the sender of an e-mail message against an authenticated user, allowing an attacker to spoof another user's e-mail address...
PT-2024-38169 · Hostgator · Hostgator
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain, thus bypassing security measure...
CVE-2024-7208: Undefined Security Weakness
A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain, thus bypass security measures provided by DMARC or SPF or DKIM policies...
PT-2024-38170 · Bird +1 · Fastmail +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A vulnerability exists in the use of shared SPF records in multi-tenant hosting providers, allowing attackers to use network authorization to be abused to spoof the email identity o...
Multiple SMTP services are susceptible to spoofing attacks due to insufficient enforcement
Overview Multiple hosted, outbound SMTP servers are vulnerable to email impersonation. This allows authenticated users and certain trusted networks to send emails containing spoofed sender information. Two vulnerabilities were identified that reduce the authentication and verification of the...
EulerOS 2.0 SP8 : golang (EulerOS-SA-2024-2030)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a timeout mechanism introduced by the serial:imx component while waiting for the sender to empty...
CVE-2024-34588
Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...
PT-2024-26002 · Librtp.So · Librtp.So
Name of the Vulnerable Software and Affected Versions: librtp.so versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper input validation in parsing RTCP SR packets, which allows remote attackers to trigger a temporary denial of service. User interaction is required...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an improper input validation issue in the parsing...
Astra Linux – Vulnerability in exim4
Before version 4.97.1, Exim allowed SMTP smuggling in certain pipeline/chunking configurations. Remote attackers could use a known exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, thereby bypassing an SPF protection mechanism. This issue arises because Exim...
Malicious code in system-info-sender (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3076 Malicious code in system-info-sender (npm)
--- -= Per source details. Do not edit below this line.=-...