Lucene search
+L

270 matches found

Kitploit
Kitploit
added 2026/09/13 9:41 a.m.8 views

CVE-2025-43919-POC

🚨 CVE-2025-43919:GNU Mailman 2.1.39 中的目录遍历漏洞(cPanel/WHM) 在随 cPanel/WHM 捆绑发布的 GNU Mailman 2.1.39 中发现了一个新漏洞,允许未经身份验证的远程攻击者通过目录遍历缺陷读取服务器上的任意文件。 📌 漏洞摘要: 类型 :目录遍历(未认证) 组件 :private.py CGI 脚本 受影响端点 :/mailman/private/mailman 影响 :泄露 /etc/passwd、.mbox 存档和 Mailman 配置文件等文件 CVSS 评分 :5.8(中危) CVE ID...

7.5CVSS6.2AI score0.01345EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 9:45 p.m.7 views

CVE-2025-43920

CVE-2025-43920: Inyección de Comandos a través del Asunto del Correo Electrónico en GNU Mailman 2.1.39 Paquete cPanel/WHM Descubierto por: Firudin Davudzada y Musazada Aydan Fecha de Divulgación: Abril de 2025 CVE ID: CVE-2025-43920 Severidad: 5.4 Medio CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:...

8.1CVSS5.8AI score0.00562EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 1:54 p.m.8 views

CVE-2025-43919

CVE-2025-43919: Directory Traversal en GNU Mailman 2.1.39 Paquete cPanel/WHM Descubierto por: Firudin Davudzada & Musazada Aydan Fecha de divulgación: Abril de 2025 CVE ID: CVE-2025-43919 Gravedad: 5.8 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Tipo de ataque: Remoto Software afectado: G...

7.5CVSS6.3AI score0.01345EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 1:22 p.m.5 views

CVE-2025-43921

CVE-2025-43921: GNU Mailman 2.1.39(cPanel/WHM 捆绑包)中未经身份验证的邮件列表创建 发现者: Firudin Davudzada & Musazada Aydan 披露日期: 2025年4月 CVE ID: CVE-2025-43921 严重性: 5.3 中等 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 攻击类型: 远程 受影响软件: GNU Mailman 2.1.39(与 cPanel/WHM 捆绑) 概述 与 cPanel 和 WHM 捆绑的 GNU Mailman 2.1.39...

8.1CVSS6.2AI score0.00562EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.13 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093198)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093198 advisory. In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be...

6.5CVSS6.6AI score0.01153EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093203)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093203 advisory. In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other...

8.8CVSS6.8AI score0.00733EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093171 advisory. GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against...

6.1CVSS6.6AI score0.02288EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093193)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093193 advisory. In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS. Tenable has extracted the preceding...

6.1CVSS6.8AI score0.01381EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093157 advisory. GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. Tenable has extracted the preceding description block...

4.3CVSS6.7AI score0.01888EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093164 advisory. /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. Tenable has extracted the preceding description block directly from the Unity Linux...

6.5CVSS6.7AI score0.02698EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093169 advisory. GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrftoken value is derived from the admin password, and may be useful in conducting a...

4.3CVSS6.7AI score0.0125EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/02 2:13 p.m.13 views

PYSEC-2026-661 Moderate severity vulnerability that affects mailman

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site...

6.5CVSS6.1AI score0.02541EPSS
SaveExploits0References8
Fedora
Fedora
added 2026/06/27 1:12 a.m.17 views

[SECURITY] Fedora 44 Update: python-postorius-1.3.13-1.fc44

The Postorius Django app provides a web user interface to access GNU Mailman...

7.2CVSS5.8AI score0.00237EPSS
SaveExploits0
Fedora
Fedora
added 2026/06/27 12:56 a.m.20 views

[SECURITY] Fedora 43 Update: python-postorius-1.3.13-1.fc43

The Postorius Django app provides a web user interface to access GNU Mailman...

7.2CVSS5.8AI score0.00237EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/07 12:00 a.m.22 views

Postorius 跨站脚本漏洞

Postorius is an open-source web application developed by GNU Mailman for managing email lists. Versions of Postorius 1.3.13 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from the lack of escaping of HTML in the message titles when these titles were rendere...

7.2CVSS5.7AI score0.00237EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-2613

Malware in sbrugna...

8.8CVSS8.6AI score0.00733EPSS
SaveExploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2011-0722

Malware in sbrugna...

4.3CVSS8.6AI score0.04248EPSS
SaveExploits0References36
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2016-7778

Malware in sbrugna...

8.8CVSS8.6AI score0.01613EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.21 views

EUVD-2021-0197

Malware in sbrugna...

5.5CVSS5.3AI score0.01186EPSS
SaveExploits1References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-24807

Malware in sbrugna...

6.1CVSS6.3AI score0.00895EPSS
SaveExploits1References3
Rows per page
Query Builder