EUVD-2001-0678

Malware in sbrugna...

EUVD-2008-1719

Malware in sbrugna...

EUVD-2015-5544

Malware in sbrugna...

EUVD-2014-2429

Malware in sbrugna...

EUVD-2012-1925

Malware in sbrugna...

EUVD-2014-2129

Malware in sbrugna...

EUVD-2017-8994

Malware in sbrugna...

EUVD-2022-28205

Malicious code in bioql PyPI...

EUVD-2022-2570

Malicious code in bioql PyPI...

EUVD-2024-47777

Malicious code in bioql PyPI...

EUVD-2024-53483

Malicious code in bioql PyPI...

EUVD-2024-20707

Malicious code in bioql PyPI...

EUVD-2025-10965

Malicious code in bioql PyPI...

EUVD-2022-4150

Malicious code in bioql PyPI...

EUVD-2025-13254

Malicious code in bioql PyPI...

CVE-2025-59689

Libraesva ESG is affected by CVE-2025-59689. The vulnerability allows command injection via a specially crafted compressed email attachment, impacting ESG 4.5 through 5.5.x prior to fixed versions. Affected fixes are: ESG 5.0.31, ESG 5.1.20, ESG 5.2.31, ESG 5.4.8, and ESG 5.5.7 (with older 4.5–5....

PT-2025-38625

Name of the Vulnerable Software and Affected Versions Libraesva Email Security Gateway versions 4.5 through 5.5.x before 5.5.7 Libraesva Email Security Gateway version 5.0 through 5.0.31 Libraesva Email Security Gateway version 5.1 through 5.1.20 Libraesva Email Security Gateway version 5.2 throu...

CVE-2025-59689

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For...

WordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin Email Attachment by Order Status & Products versions = 1.0.1...

thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link

The Mozilla Foundation's Security Advisory describes the following issue: Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested email attachment message/rfc822 and setting its content type to...