[SECURITY] Fedora 36 Update: thunderbird-91.11.0-1.fc36

Mozilla Thunderbird is a standalone mail and newsgroup client...

PT-2022-11285

Name of the Vulnerable Software and Affected Versions EyesOfNetwork versions prior to 07-07-2021 Description The issue allows for Remote Code Execution on the mail options configuration page. Specifically, in the location of the sendmail application in the cacti configuration page, it is possible...

CVE-2021-40643: Undefined Security Weakness

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page by default/usr/sbin/sendmail it is possible to execute any command, which will be executed when we make...

CVE-2020-27509

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

Cross site scripting

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

CVE-2020-27509

CVE-2020-27509 describes a persistent cross-site scripting (XSS) flaw in the Galaxkey Secure Mail Client up to version 5.6.11.5. The vulnerability arises from intercepting the HTTP POST used to send emails and injecting an XSS payload into the subject field, which executes when the recipient logs...

CVE-2020-27509

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

CVE-2020-27509: Improper Neutralization of Input During Web Page Generation

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

WordPress Mail Subscribe List plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. cross-site request forgery vulnerability exists in versions of the WordPress Mail Subscribe List plugin...

Malicious code in login.mail.ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0636f08f714839bf59e63c612d7d9674f0057b4cf246726b4da2f57999c5ebac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4829 Malicious code in nextcloud-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49b707040d71b3da11b82122e52723a5f64ca6b9384db7ab5b48995623e258af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextcloud-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49b707040d71b3da11b82122e52723a5f64ca6b9384db7ab5b48995623e258af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nextcloud-mail

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-4989 Malicious code in nylas-mail-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cc8ea198e81b0fc8307cbea75e5735d219ac373362c7748102cb514207959d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nylas-mail-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cc8ea198e81b0fc8307cbea75e5735d219ac373362c7748102cb514207959d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nylas-mail-all

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-3756 Malicious code in icons-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5044c44aa1d6f9b455bbd96420485e2d7aa4dee38d050a7ebdcb96dbd10fd65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in icons-mail

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in icons-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5044c44aa1d6f9b455bbd96420485e2d7aa4dee38d050a7ebdcb96dbd10fd65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1603

The Mail Subscribe List WordPress plugin before 2.1.4 does not have CSRF check in place when deleting subscribed users, which could allow attackers to make a logged in admin perform such action and delete arbitrary users from the subscribed list...