Cross-site Scripting (XSS)

sogo is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the NSString+Utilities.m of Mail Handler, allowing an attacker to inject and execute malicious javascript...

Maddy Mail Server 授权问题漏洞

Maddy Mail Server is a combinable, all-in-one mail server from the individual developer Max Mazurov in Russia. A security vulnerability exists in Maddy Mail Server version 0.2.0 through versions prior to 0.6.3, which originates from allowing users to bypass authentication...

Signature Verification Bypass

thunderbird is vulnerable to Signature Verification Bypass. Certificate OCSP revocation status was not checked when verifying S/Mime signatures which allows mails signed with a revoked certificate to be displayed as having a valid signature...

CVE-2023-1360 SourceCodester Employee Payslip Generator with Sending Mail New User Creation sql injection

A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql...

CVE-2023-1360

The CVE-2023-1360 entry concerns SourceCodester Employee Payslip Generator with Sending Mail 1.2.0. Multiple connected sources confirm a SQL injection in the New User Creation flow, specifically via manipulating the username argument in files/Users.php?f=save, allowing remote attacks. No official...

SourceCodester Employee Payslip Generator with Sending Mail SQL注入漏洞

Employee Payslip Generator with Sending Mail is an Employee Payslip Generator with Sending Mail by Carlo Montero Personal Developer. SourceCodester Employee Payslip Generator with Sending Mail version 1.2.0 suffers from a SQL injection vulnerability that stems from an incorrect manipulation of th...

DEBIAN-CVE-2023-27985

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90...

GNU Emacs 代码注入漏洞

GNU Emacs is a family of text editors in the American GNU community. A code injection vulnerability exists in GNU Emacs versions 28.1 through 28.2, which stems from the fact that emacsclient-mail.desktop is susceptible to Emacs Lisp code injection attacks...

Ransomware review: March 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who builds a monthly picture of ransomware activity by monitoring the information published by ransomware gangs on their Dark Web leak sites. This information represents victims who were successfully attacke...

Debian: Security Advisory (DLA-489-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-887-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mail-place.com Cross Site Scripting vulnerability OBB-3208744

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of NextCloud Mail’s email client, related to insufficient validation of incoming requests, allows attackers to scan internal services and servers accessible from the local network of the NextCloud server.

The vulnerability of NextCloud Mail’s email client stems from insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to scan internal services and servers accessible from the local network of the NextCloud server...

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

Sql injection

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

SUSE CVE-2019-11499

In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message...

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

CVE-2022-46501

CVE-2022-46501 affects Accruent LLC Maintenance Connection 2021 (all) and 2022.2. The vulnerability is a SQL injection in the E-Mail to Work Order function. The NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no user interaction, and no privileges required, yielding ...