270 matches found
CVE-2025-43919
CVE-2025-43919: GNU Mailman 2.1.39 cPanel/WHM 번들의 디렉터리 트래버설 취약점 발견자: Firudin Davudzada & Musazada Aydan 공개일: 2025년 4월 CVE ID: CVE-2025-43919 심각도: 5.8 중간 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N 공격 유형: 원격 영향받는 소프트웨어: GNU Mailman 2.1.39 cPanel/WHM과 함께 번들로 제공 개요 cPanel 및 WHM과 함께 번들로 제공되는 GNU...
CVE-2025-43921
CVE-2025-43921: Неаутентифицированное создание списков рассылки в GNU Mailman 2.1.39 пакет cPanel/WHM Обнаружено: Firudin Davudzada и Musazada Aydan Дата раскрытия: апрель 2025 CVE ID: CVE-2025-43921 Серьезность: 5.3 Средний CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Тип атаки: Удаленная...
CVE-2025-43919-POC
🚨 CVE-2025-43919: GNU Mailman 2.1.39 cPanel/WHM의 디렉토리 트래버설 GNU Mailman 2.1.39cPanel/WHM 번들 버전에서 새로운 취약점이 발견되었습니다. 인증되지 않은 원격 공격자가 디렉토리 트래버설 결함을 통해 서버의 임의 파일을 읽을 수 있습니다. 📌 취약점 요약: 유형 : 디렉토리 트래버설 인증 불필요 구성 요소 : private.py CGI 스크립트 영향받는 엔드포인트 : /mailman/private/mailman 영향 : /etc/passwd, .mbox 아카이브,...
CVE-2025-43920
CVE-2025-43920: Внедрение команд через тему письма в GNU Mailman 2.1.39 пакет cPanel/WHM Обнаружено: Firudin Davudzada & Musazada Aydan Дата раскрытия: Апрель 2025 CVE ID: CVE-2025-43920 Серьёзность: 5.4 Средняя CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Тип атаки: Удалённая Затрагиваемое ПО: G...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093198)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093198 advisory. In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093203)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093203 advisory. In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093193)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093193 advisory. In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS. Tenable has extracted the preceding...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093171)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093171 advisory. GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093157)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093157 advisory. GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. Tenable has extracted the preceding description block...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093164)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093164 advisory. /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. Tenable has extracted the preceding description block directly from the Unity Linux...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093169)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093169 advisory. GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrftoken value is derived from the admin password, and may be useful in conducting a...
PYSEC-2026-661 Moderate severity vulnerability that affects mailman
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site...
[SECURITY] Fedora 44 Update: python-postorius-1.3.13-1.fc44
The Postorius Django app provides a web user interface to access GNU Mailman...
[SECURITY] Fedora 43 Update: python-postorius-1.3.13-1.fc43
The Postorius Django app provides a web user interface to access GNU Mailman...
Postorius 跨站脚本漏洞
Postorius is an open-source web application developed by GNU Mailman for managing email lists. Versions of Postorius 1.3.13 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from the lack of escaping of HTML in the message titles when these titles were rendere...
EUVD-2021-2613
Malware in sbrugna...
EUVD-2011-0722
Malware in sbrugna...
EUVD-2016-7778
Malware in sbrugna...