CVE-2023-46980

CVE-2023-46980 Best Courier Management System v.1.000 中的一个问题允许远程攻击者通过向 userID 参数发送特制脚本来执行任意代码并提升权限。 额外信息 视频POC链接在YT； https://youtu.be/3Mz2lSElg7Y 漏洞类型 不正确的访问控制 - 账户接管 受影响组件 更新用户表单，其中我们可以更新用户名和密码 攻击向量 需要用户ID，而用户ID很容易在密码重置中获得。 发现者 sajal jat...

CVE-2026-89289

The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...

EUVD-2026-92967

The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...

CVE-2026-89289 Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint

The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...

WordPress Fast Courier plugin <= 5.2.3 - Unauthenticated Order Fulfillment Update vulnerability

Unauthenticated Order Fulfillment Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Fast Courier versions = 5.2.3...

CVE-2026-89289 Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint

The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...

CVE-2026-89289

The Fast Courier WordPress plugin (versions

PT-2026-106337

Name of the Vulnerable Software and Affected Versions Fast Courier versions prior to 5.2.4 Description The Fast Courier WordPress plugin fails to restrict an unauthenticated REST route used for writing order fulfillment data. This allows unauthenticated attackers to overwrite the courier status a...

CVE-2023-46974

CVE-2023-46974 POC 描述 Best Courier Management System 中的跨站脚本漏洞 v.1.000 允许远程攻击者通过 精心构造的载荷传递给 URL 中的 page 参数来执行任意代码。 漏洞类型 跨站脚本攻击 XSS 产品供应商 https://www.sourcecodester.com/php/16848/best-courier-management-system-project-php.html 受影响的产品代码库 v 1.000 - 最佳快递管理系统 受影响的组件 所有 URL 攻击类型 远程 影响代码执行 true 攻击向量...

CVE-2023-46451

CVE-2023-46451 建议描述 Sourcecodester 最佳快递管理系统 v1.0 在更改用户名字段中存在跨站脚本攻击（XSS）漏洞。 附加信息 我在 YouTube 上更新了视频 POC：https://youtu.be/f8B3m5YfqI 漏洞类型 跨站脚本攻击（XSS） 受影响产品代码库 开源 受影响组件 更改用户名字段 攻击类型 远程 攻击向量 在用户名字段中上传 XSS 有效载荷 参考 https://youtu.be/f8B3m5YfqI 发现者 sajal jat...

CVE-2026-67194

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...

CVE-2026-67194

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...

UBUNTU-CVE-2026-67194

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...

CVE-2026-67194 Courier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH Queries

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...

CVE-2026-67194

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...

CVE-2026-67194 Courier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH Queries

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...

CVE-2026-67194

CVE-2026-67194 affects Courier IMAP prior to 6.0.1 and Courier Mail Server prior to 2.0.2. The vulnerability lies in the SEARCH parser (alloc_search_key in searchinfo.C), which recursively descends through deeply nested parenthesized groups without a depth limit. A single IMAP command with ~2500 ...

CVE-2026-67194 Courier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH Queries

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...

CVE-2026-67194

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...

EUVD-2026-50414

Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...