2014 matches found
keycloak vulnerable to unauthorized login via mail server setup
A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be '[email protected]'...
GHSA-CF8F-W2C5-P5JR keycloak vulnerable to unauthorized login via mail server setup
A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be '[email protected]'...
mail.camarasaovalentim.rs.gov.br Cross Site Scripting vulnerability OBB-2621741
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
[SECURITY] Fedora 34 Update: clamav-0.103.6-1.fc34
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...
[SECURITY] Fedora 36 Update: clamav-0.103.6-1.fc36
Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...
Alt-N Mdaemon Cross-Site Scripting Vulnerability (CNVD-2022-77865)
Alt-N MDaemon is a mail service system from Alt-N USA that provides complete mail server functionality, protects users from spam, enables web login to send and receive mail, supports remote management, and when used in conjunction with the MDaemon AntiVirus plugin, it also protects the system...
Alt-N Mdaemon Cross-Site Scripting Vulnerability
Alt-N MDaemon is a mail service system from Alt-N USA that provides complete mail server functionality, protects users from spam, enables web login to send and receive mail, supports remote management, and when used in conjunction with the MDaemon AntiVirus plugin, it also protects the system...
CVE-2022-28076
Seacms v11.6 was discovered to contain a remote command execution RCE vulnerability via the Mail Server Settings...
CVE-2022-28076
Seacms v11.6 was discovered to contain a remote command execution RCE vulnerability via the Mail Server Settings...
Command injection
Seacms v11.6 was discovered to contain a remote command execution RCE vulnerability via the Mail Server Settings...
CVE-2022-28076
Seacms v11.6 was discovered to contain a remote command execution RCE vulnerability via the Mail Server Settings...
CVE-2022-28076
CVE-2022-28076 affects SeaCMS v11.6. The issue is a remote command execution (RCE) via the Mail Server Settings in SeaCMS’s code path. The connected records consistently describe SeaCMS 11.6 as vulnerable to RCE from mail server configuration, but do not provide precise technical details about th...
CVE-2022-28076
Seacms v11.6 was discovered to contain a remote command execution RCE vulnerability via the Mail Server Settings...
SeaCMS 安全漏洞
SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 11.6, which stems from the discovery of a Remote Command Execution RCE vulnerability containing a...
Rumble Mail Server Cross-Site Scripting Vulnerability (CNVD-2022-63575)
Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3, and IMAP4v1 from Daniel Gruno's personal developer.Rumble Mail Server version 0.51.3135 is vulnerable to a cross-site scripting vulnerability that stems from the servername parameter lacks a data validation filter for...
Rumble Mail Server Cross-Site Scripting Vulnerability
Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3 and IMAP4v1 by Daniel Gruno, a personal developer.A cross-site scripting vulnerability exists in Rumble Mail Server version 0.51.3135, which stems from the username parameter's lack of data validation filtering for user The...
Rumble Mail Server Code Execution Vulnerability
Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3 and IMAP4v1 by Daniel Gruno, a personal developer.A code execution vulnerability exists in Rumble Mail Server version 0.51.3135, which stems from an unquoted service path in The service path is not referenced in RumbleService,...
Rumble Mail Server Cross-Site Scripting Vulnerability (CNVD-2022-63573)
Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3, and IMAP4v1 from Daniel Gruno's personal developer.Rumble Mail Server version 0.51.3135 is vulnerable to a cross-site scripting vulnerability that stems from the domain and path parameters are missing a data validation filter...
The vulnerability of the Cyrus IMAP mail server, related to the use of cryptographic algorithms containing defects, allows attackers to cause service failures.
The vulnerability of the Cyrus IMAP mail server lies in the ability to select a table element for data storage. Exploiting this vulnerability allows an attacker operating remotely to cause a service failure...