249 matches found
smartermail-CVE-2026-23760-poc
SmarterMail-CVE-2026-23760-poc A proof-of-concept exploiting an authentication bypass via password reset API for the SmaretMail system administrator account. Vulnerability The vulnerability exists due to an authentication bypass vulnerability in the password reset API. The force-reset-password...
The vulnerability of the download mechanism of the SmarterTools SmarterMail email server allows a perpetrator to execute arbitrary code.
The vulnerability of the attachment loading mechanism in the SmarterTools SmarterMail email server relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
SmarterMail-CVE-2026-24423-
SmarterMail ConnectToHub RCE A Python-based exploit for CVE-2026-24423 , an unauthenticated Remote Code Execution vulnerability in SmarterTools SmarterMail's ConnectToHub functionality. Intended use: Authorized security testing, CTFs, Hack The Box labs, and controlled research environments only...
The vulnerability of the SmarterTools SmarterMail mail server lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the SmarterTools SmarterMail mail server is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using MAPI requests...
SmarterMail < 100.0.9526 XSS (CVE-2026-26930)
The version of SmarterTools SmarterMail installed on the remote host is prior to 100.0.9526. It is, therefore, affected by a cross-site scripting vulnerability: - SmarterTools SmarterMail before build 9526 allows XSS via MAPI requests. CVE-2026-26930 Note that Nessus has not tested for this issue...
CVE-2026-26930
CVE-2026-26930 affects SmarterTools SmarterMail prior to version 9526, where XSS is possible via MAPI requests. The CVSS v3.1 base score is 7.2 (HIGH) with network attack vector, no privileges required, user interaction not required, and a changed scope. Patch guidance is to upgrade to 9526 or la...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-11953link is external React Native Community CLI OS Command Injection Vulnerability CVE-2026-24423link is external SmarterTools SmarterMail Missing...
CVE-2026-24423 SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the...
CVE-2026-24423: Missing Authentication for Critical Function
SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the...
SmarterTools SmarterMail security vulnerability
SmarterTools SmarterMail is a set of email server software developed by SmarterTools Corporation. This software supports features such as spam filtering, data statistics, and Simple Mail Transfer Protocol SMTP authentication. Previous versions of SmarterTools SmarterMail, including the 9511...
PT-2026-5795
Уязвимость почтового сервера SmarterTools SmarterMail связана с использованием имени с неправильной ссылкой. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, перехватить учетную запись пользователя...
SmarterTools SmarterTrack security vulnerabilities
SmarterTools SmarterTrack is a customer service software developed by SmarterTools Corporation. It can improve customer service and reduce support costs. Version 7922 of SmarterTools SmarterTrack contains a security vulnerability. This vulnerability stems from the Chat Management search form, whi...
CVE-2020-36926
SmarterTrack 7922 is affected by an information disclosure vulnerability in the Chat Management search form. The issue allows unauthenticated access to the /Management/Chat/frmChatSearch.aspx endpoint, exposing agents’ first and last names and their unique identifiers. Reported details consistent...
PT-2026-5794
Уязвимость метода API ConnectToHub почтового сервера SmarterTools SmarterMail связана с отсутствием аутентификации для критичной функции. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
CVE-2009-4995
Cross-site scripting XSS vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
SmarterTools SmarterMail Detection Consolidation
Consolidation of SmarterTools SmarterMail detections. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if descripti...
EUVD-2004-2576
Malware in sbrugna...
EUVD-2019-16756
Malware in sbrugna...