63 matches found
rspamd
はじめに Rspamd は、正規表現、統計分析、URL ブラックリストなどのカスタムサービスを含む多数のルールによってメッセージを評価できる、高度なスパムフィルタリングシステムおよびメール処理フレームワークです。各メッセージは Rspamd によって分析され、MTA がその後の処理（メッセージの拒否やスパムを示す特別なヘッダーの追加など）に使用できる判定結果が、DKIM 署名の可能性やメッセージに推奨される変更などの追加情報とともに与えられます。 Rspamd は Milter として動作でき、Postfix や Sendmail などの一般的な MTA システムと直接連携できます。...
CVE-2026-56727
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call was silently discarded. Regardless of whether gpg reported a valid, invalid, or missing signature, the handler...
CVE-2026-56727 Zammad: PGP signature spoofing via unvalidated verification return
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call was silently discarded. Regardless of whether gpg reported a valid, invalid, or missing signature, the handler...
EUVD-2026-87214
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call was silently discarded. Regardless of whether gpg reported a valid, invalid, or missing signature, the handler...
CVE-2026-56727
The open-source helpdesk system Zammad is vulnerable to PGP signature spoofing prior to version 7.0.2 . The root cause is that the system silently discards the return value of the gpg verification call during inbound PGP email processing. Consequently, the handler unconditionally writes a success...
PT-2026-98941
Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description In the inbound PGP email processing, the return value of the gpg verification call is silently discarded. The handler unconditionally marks the security preferences of the article as having a successf...
rspamd v4.2.0
Introduction Rspamd is an advanced spam filtering system and email processing framework that allows evaluation of messages by a number of rules including regular expressions, statistical analysis and custom services such as URL black lists. Each message is analysed by Rspamd and given a verdict...
GitLab 15.9 < 18.10.8 / 18.11 < 18.11.5 / 19.0 < 19.0.2 (CVE-2026-9694)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions, could have allowed an...
CVE-2026-47123
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.220, the email processing pipeline in FreeScout's FetchEmails command has two code paths for identifying agent user replies based on In-Reply-To / References headers. The notification reply path...
OTRS 安全漏洞
OTRS is a service management solution developed by the German company OTRS. Versions 8.0.X, 2023.X, 2024.X, 2025.X, and 2026.X up to version 2026.4.X of OTRS contained security vulnerabilities. These vulnerabilities were due to uncontrolled resource allocation during email processing, which could...
CVE-2026-47123
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.220, the email processing pipeline in FreeScout's FetchEmails command has two code paths for identifying agent user replies based on In-Reply-To / References headers. The notification reply path...
FreeScout 数据伪造问题漏洞
FreeScout is a lightweight and powerful free open-source help desk and shared inbox built using PHP Laravel framework by FreeScout Inc. Versions of FreeScout prior to 1.8.220 contained a data manipulation vulnerability. This vulnerability stemmed from the use of In-Reply-To/References headers in...
CVE-2026-33654
nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing module nanobot/channels/email.py, allowing a remote, unauthenticated attacker to execute arbitrary LLM instructions and subsequently, system tools without...
pearweb 安全漏洞
PearWeb is a PHP extension and application repository developed by PEAR. Versions of PearWeb prior to 1.33.0 contained a security vulnerability. This vulnerability stemmed from the use of the pregReplace function with the / modifier in incorrectly updated email processing, potentially allowing PH...
The vulnerability of the library for analyzing and processing MIME messages, Email-MIME, allows for unlimited distribution of resources, enabling attackers to cause service failures.
The vulnerability of the library for analyzing and processing MIME messages in Email-MIMEE is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures through specially created MIME messages...
EUVD-1999-0551
Malware in sbrugna...
EUVD-2021-22725
Malware in sbrugna...
EUVD-2020-27940
Malware in sbrugna...