CVE-2026-112357

GFI KerioConnect Kerio Connect Outlook Connector Offline Edition, 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can...

CVE-2026-112356

GFI KerioConnect Kerio Connect before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail component that allows a remote attacker to spoof link targets or inject HTML into a message as rendered in a victim's authenticated Webmail session by sending a crafted email whose te...

CVE-2026-112353

GFI KerioConnect Kerio Connect before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by uploading a crafted SVG email attachment that bypasses sanitization of...

Kerio Connect Server.startEncryption Command Injection Authenticated RCE — Detect

Fingerprint / reachability check for Kerio Connect Server.startEncryption Command Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Kerio Connect Server.startEncryption Command Injection Authenticated RCE""" from kittysploit import from...

Kerio Connect Server.startEncryption command injection

FullAdmin WebAdmin login then JSON-RPC Server.startEncryption injects into a shell pipeline built from the password field system sink. !/usr/bin/env python3 -- coding: utf-8 -- """Kerio Connect Server.startEncryption password command injection RCE.""" from future import annotations import json...

VulnCheck KEV: CVE-2026-112353

GFI KerioConnect Kerio Connect before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by uploading a crafted SVG email attachment that bypasses sanitization of...

CVE-2026-112353: Improper Neutralization of Input During Web Page Generation

GFI KerioConnect Kerio Connect before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by uploading a crafted SVG email attachment that bypasses sanitization of...

Kerio Connect Login Panel - Detect

Kerio Connect login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Kerio Connect login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kerio Connect Login Panel - Detect',...

CVE-2023-25267

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

EUVD-2011-1507

Malware in sbrugna...

EUVD-2023-29229

Malicious code in bioql PyPI...

CVE-2025-2977

A vulnerability was found in GFI KerioConnect 10.0.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component PDF File Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

GFI KerioConnect code injection vulnerability

GFI KerioConnect is an enterprise-grade email and collaboration solution from GFI that provides mail, calendar, contacts, tasks, and file sharing. A code injection vulnerability exists in GFI KerioConnect version 10.0.6, which stems from a cross-site scripting vulnerability in the Signature Handl...

PT-2023-13458 · Gfi · Kerio Connect

Name of the Vulnerable Software and Affected Versions: Kerio Connect administration versions 9.4 through 9.4.1 Description: A security issue affects the administration component of Kerio Connect. The estimated number of potentially affected devices worldwide is not specified. There are reports of...

CVE-2023-25267

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

CVE-2023-25267

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

Stack overflow

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

GFI Kerio Connect buffer error vulnerability

GFI Kerio Connect is a mail server and all-in-one collaboration tool from GFI. A security vulnerability exists in GFI Kerio Connect versions prior to 10.0.0 that stems from the presence of a stack-based buffer overflow vulnerability...

CVE-2023-25267: Out-of-bounds Write

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

CVE-2023-25267

GFI Kerio Connect is affected: version 9.4.1 patch 1 contains a stack-based buffer overflow in the webmail component’s 2FASetup function, exploitable via an authenticated request to webmail/api/jsonrpc using a long primaryEMailAddress. The issue is fixed in version 10.0.0. The vulnerability is as...