CVE-2026-105129 LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

LaraDashboard before 1.4.8 contains an incorrect authorization vulnerability that allows authenticated users with only settings.view permission to read stored secrets through the settings API. Attackers can query GET /api/settings or /api/settings/optionname to retrieve plaintext AI provider API...

CVE-2026-105129 LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

LaraDashboard before 1.4.8 contains an incorrect authorization vulnerability that allows authenticated users with only settings.view permission to read stored secrets through the settings API. Attackers can query GET /api/settings or /api/settings/optionname to retrieve plaintext AI provider API...

CVE-2026-105129

LaraDashboard versions prior to 1.4.8 are vulnerable to an incorrect authorization flaw (CWE-863) in the settings API. Authenticated users possessing only the settings.view permission can perform GET requests to /api/settings or /api/settings/{option_name} to access sensitive data. This vulnerabi...

Fix-Apple-Mail-CVE-2020-9922

Fix-Apple-Mail-CVE-2020-9922 Apple Mailには恐ろしいゼロクリック脆弱性があります。High Sierraより前のOS Xバージョンはパッチが適用されていません。 https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c これは急いで作成したもので、Mavericksでのみテストしました。他のOSで動作しない理由は見当たりませんが、それが確実に動作するという意味では決してありません！...

CVE-2020-7247-reproducer

CVE-2020-7247 OpenSMTPD 정보 이 저장소에는 취약한 OpenSMTPD6.6.1p1 환경을 포함하는 Docker 이미지를 빌드하는 데 필요한 파일이 들어 있습니다. 이 취약점을 통해 공격자는 특수하게 조작된 SMTP 세션, 특히 MAIL FROM 필드를 통해 임의의 명령을 실행할 수 있습니다. 사용법 1. Docker 이미지 빌드 Debian 기반: docker build -t opensmtpd-vuln -f Dockerfile . docker run -it --rm --name opensmtpd-vuln-te...

CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.

CVE-2026-85046 + CVE-2026-87491 + CVE-2026-87606 + CVE-2026-87575 レンダラーからパスを抜け出すのは本当に大変だという話。 550 mg のカフェインを摂って一晩中 Chrome の CVE を行ったり来たりしていれば、あなたもレンダラーから脱出できる。 CVE-2026-85046 は Float64Array を破壊して V8 ケージの読み書きを可能にする。 CVE-2026-87491 はコンパイル済み Wasm を上書きし、ネイティブのレンダラーコードを実行する。 CVE-2026-87606...

CVE-2023-0860

CVE-2023-0860 Modoboa 메일 호스팅 및 관리 애플리케이션 v2.0.3에 대한 무차별 대입 공격 오픈소스 메일 호스팅 및 관리 애플리케이션 Modoboa v2.0.3 이하 버전은 인증되지 않은 로그인 시도를 제한하지 않아 로그인 페이지에서 무차별 대입 공격을 허용합니다. https://vulners.com/cve/CVE-2023-0860 https://nvd.nist.gov/vuln/detail/CVE-2023-0860 huntr.dev 플랫폼을 통해 제출됨...

CVE-2024-28589

CVE-2024-28589 Windows용 Axigen Mail Server에서 모든 버전 10.5.18까지 영향을 주는 취약점이 발견되었으며, 이는 로컬 권한 상승을 허용합니다. 설명: Axigen Mail Server는 world-writable 디렉토리에서 안전하지 않은 DLL 로딩으로 인해 로컬 권한 상승에 취약한 것으로 밝혀졌습니다. SYSTEM 권한으로 실행되는 "Axigen Mail Server" 서비스 시작 시, 존재하지 않는 디렉토리를 검색합니다. 로컬 접근 권한이 있는 공격자는 이 디렉토리를 생성하고 악성 D...

CVE-2026-105117

OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control notification email wording via the forgotPassword and register actions on /json/realm/users. Attackers can supply subject and message fields to send phishing mail from the...

asf__james-project_CVE-2022-22931_3-6-0

Apache James 프로젝트 :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgJoin the chat at...

CVE-2026-105117

OpenAM versions prior to 16.1.3 are vulnerable to an email content injection vulnerability. This flaw allows unauthenticated attackers to manipulate notification email wording by interacting with the forgotPassword and register actions on the /json/{realm}/users endpoint. By supplying custom subj...

WordPress Mail logging & Catcher plugin <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin WP Mail Catcher versions = 2.1.12...

CVE-2026-93889

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

EUVD-2026-91957

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93889

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.1.12 . The root cause is insufficient input sanitization and output escaping within the PHPMailer 'wp_mail_failed' error message. An unauthenticated att...

CVE-2026-93889 Mail logging <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93889 Mail logging <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wpmailfailed' Error Message in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

[SECURITY] Fedora 43 Update: fetchmail-6.6.8-1.fc43

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

[SECURITY] Fedora 44 Update: fetchmail-6.6.8-1.fc44

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

[SECURITY] Fedora 45 Update: mail-notification-5.4-119.git.9ae8768.fc45

Mail Notification is a status icon aka tray icon that informs you if you have new mail. It works with system trays implementing the freedesktop.org System Tray Specification, such as the GNOME Panel Notification Area, the Xfce Notification Area and the KDE System Tray...