RoundCube Webmail Message Body Function Full Access

The vulnerability of the messagebody function in the program/actions/mail/show.php file of the RoundCube Webmail email client exists due to the lack of security measures for handling web page structures. Exploiting this vulnerability allows an attacker to gain full access to the email account by...

CVE-2023-5552: Exposure of Sensitive Information to an Unauthorized Actor

A password disclosure vulnerability in the Secure PDF eXchange SPX feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 19.5.3 and older, if the password type is set to “Specified by sender”...