CVE-2025-60447: Improper Neutralization of Input During Web Page Generation

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

CVE-2024-50702

Summary: CVE-2024-50702 affects TeamPass prior to 3.1.3.1. The vulnerability arises from improper authorization checks in the mail_me/action_mail operation, allowing an unauthorized actor to perform actions intended for administrators or managers. Documents consistently describe this as an author...

MGASA-2021-0464 Updated fail2ban packages fix security vulnerability

fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command mail from mailutils package...