199 matches found
smartermail-CVE-2026-23760-poc
SmarterMail-CVE-2026-23760-poc 一个利用密码重置 API 绕过 SmaretMail 系统管理员账户认证的概念验证。 漏洞 该漏洞源于密码重置 API 中的认证绕过漏洞。force-reset-password 端点允许匿名请求，并且在重置系统管理员账户时未能验证现有密码或重置令牌。 系统管理员账户接管。 通过 SmarterMail 内置功能直接实现远程代码执行。 受影响版本 SmarterTools SmarterMail 版本低于 build 9511 PoC（由 watchtowr labs 提供） 该 PoC 非常简单： root@kitploit...
SmarterMail-CVE-2026-24423-
SmarterMail ConnectToHub RCE A Python-based exploit for CVE-2026-24423 , an unauthenticated Remote Code Execution vulnerability in SmarterTools SmarterMail's ConnectToHub functionality. Intended use: Authorized security testing, CTFs, Hack The Box labs, and controlled research environments only...
SmarterMail < 100.0.9526 XSS (CVE-2026-26930)
The version of SmarterTools SmarterMail installed on the remote host is prior to 100.0.9526. It is, therefore, affected by a cross-site scripting vulnerability: - SmarterTools SmarterMail before build 9526 allows XSS via MAPI requests. CVE-2026-26930 Note that Nessus has not tested for this issue...
CVE-2026-26930
CVE-2026-26930 affects SmarterTools SmarterMail prior to version 9526, where XSS is possible via MAPI requests. The CVSS v3.1 base score is 7.2 (HIGH) with network attack vector, no privileges required, user interaction not required, and a changed scope. Patch guidance is to upgrade to 9526 or la...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-11953link is external React Native Community CLI OS Command Injection Vulnerability CVE-2026-24423link is external SmarterTools SmarterMail Missing...
CVE-2026-24423 SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the...
SmarterTools SmarterMail security vulnerability
SmarterTools SmarterMail is a set of email server software developed by SmarterTools Corporation. This software supports features such as spam filtering, data statistics, and Simple Mail Transfer Protocol SMTP authentication. Previous versions of SmarterTools SmarterMail, including the 9511...
SmarterTools SmarterTrack security vulnerabilities
SmarterTools SmarterTrack is a customer service software developed by SmarterTools Corporation. It can improve customer service and reduce support costs. Version 7922 of SmarterTools SmarterTrack contains a security vulnerability. This vulnerability stems from the Chat Management search form, whi...
CVE-2020-36926
SmarterTrack 7922 is affected by an information disclosure vulnerability in the Chat Management search form. The issue allows unauthenticated access to the /Management/Chat/frmChatSearch.aspx endpoint, exposing agents’ first and last names and their unique identifiers. Reported details consistent...
CVE-2009-4995
Cross-site scripting XSS vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
SmarterTools SmarterMail Detection Consolidation
Consolidation of SmarterTools SmarterMail detections. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if descripti...
EUVD-2009-4957
Malware in sbrugna...
EUVD-2011-2143
Malware in sbrugna...
EUVD-2011-2148
Malware in sbrugna...
EUVD-2008-0879
Malware in sbrugna...
EUVD-2011-2146
Malware in sbrugna...
EUVD-2004-2576
Malware in sbrugna...
EUVD-2011-2145
Malware in sbrugna...