EUVD-2004-0324

Malware in sbrugna...

EUVD-2021-18860

Malware in sbrugna...

EUVD-2005-3878

Malware in sbrugna...

EUVD-2011-1927

Malware in sbrugna...

EUVD-2002-0631

Malware in sbrugna...

EUVD-2007-4594

Malware in sbrugna...

EUVD-2003-1292

Malware in sbrugna...

EUVD-2006-3468

Malware in sbrugna...

EUVD-2024-43420

Malicious code in bioql PyPI...

EUVD-2025-9540

Malicious code in bioql PyPI...

EUVD-2022-1991

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-30090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are...

USN-7570-1: Python vulnerabilities

It was discovered that Python incorrectly handled certain unicode characters during decoding. An attacker could possibly use this issue to cause a denial of service. CVE-2025-4516 It was discovered that Python incorrectly handled unicode encoding of email headers with list separators in folded...

CVE-2023-41259

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call...

Alibaba Cloud Linux 3 : 0202: dovecot (ALINUX3-SA-2024:0202)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0202 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-23184: Having a large number of...

Mishandling of comma during folding and unicode-encoding of email headers

...

CVE-2025-30090

mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true...

CVE-2025-30090

mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true...

UBUNTU-CVE-2025-30090

mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true...

CVE-2025-30090

CVE-2025-30090 affects SquirrelMail mime.php in versions up to 1.4.23-svn-20250401 and 1.5.x up to 1.5.2-svn-20250401, enabling cross-site scripting via email headers after $encoded is set to true. The provided documents describe the vulnerable component and the weak handling in headers, with no ...