CVE-2024-55929

CVE-2024-55929 affects Xerox Workplace Suite. The publicly referenced details indicate a mail spoofing issue allowing forged email headers, making messages appear as if sent from trusted sources. Affected component is the Workplace Suite email handling; the validation of headers appears to be the...

CVE-2024-55929 Mail spoofing

A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources...

PT-2025-3157

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9 Description A mail spoofing issue allows attackers to forge email headers, making it appear as though messages are sent from trusted sources. Recommendations For versions prior to 5.6.701.9,...

Debian dla-3708 : exim4 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3708 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3708-1 [email protected] https://www.debian.org/lts/security/...

USN-7204-1 neomutt vulnerabilities

Jeriko One discovered that NeoMutt incorrectly handled certain IMAP and POP3 responses. An attacker could possibly use this issue to cause NeoMutt to crash, resulting in a denial of service, or the execution of arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2018-14349,...

[SECURITY] Fedora 40 Update: thunderbird-128.6.0-1.fc40

Mozilla Thunderbird is a standalone mail and newsgroup client...

Fortinet FortiSOAR 操作系统命令注入漏洞

Fortinet FortiSOAR is a Security Orchestration, Automation and Response SOAR solution from Fortinet, Inc. The Fortinet FortiSOAR IMAP connector is vulnerable to an operating system command injection vulnerability that stems from an improper neutralization of special elements used in operating...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird ESR 128.6 MFSA 2025-05, bsc1234991 Security fixes: CVE-2025-0237 bmo1915257 WebChannel APIs susceptible to confused deputy attack CVE-2025-0238 bmo1915535 Use-after-free when breaking lines in text...

SUSE-SU-2025:0080-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird ESR 128.6 MFSA 2025-05, bsc1234991 Security fixes: - CVE-2025-0237 bmo1915257 WebChannel APIs susceptible to confused deputy attack - CVE-2025-0238 bmo1915535 Use-after-free when breaking lines in text -...

[SECURITY] Fedora 41 Update: thunderbird-128.6.0-1.fc41

Mozilla Thunderbird is a standalone mail and newsgroup client...

SUSE CVE-2024-55196

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

WordPress Email Templates Customizer YeeMail plugin <= 2.1.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail versions = 2.1.4...

Insufficiently Protected Credentials

GoPhish is vulnerable to Insufficiently Protected Credentials. The vulnerability is due to improper handling of mail server credentials due to storing cleartext passwords for the configured IMAP and SMTP servers, exposing sensitive information to attackers...

PT-2025-3179 · Unknown · 10Centmail

Name of the Vulnerable Software and Affected Versions: 10CentMail versions n/a through 2.1.50 Description: The issue affects 10CentMail, allowing Reflected XSS due to improper neutralization of input during web page generation. This flaw enables Cross-site Scripting attacks. Recommendations: For...

PT-2025-42745

Name of the Vulnerable Software and Affected Versions golang versions 1.15 golang versions 1.19 Description The ParseAddress function in the net/mail package experiences excessive CPU consumption. Recommendations Update to a newer version of golang that contains a fix for this vulnerability...

GHSA-7RM3-4W6J-8XX4 TeamPass mail_me operation authorization issue

TeamPass before 3.1.3.1 does not properly check whether a mailme aka actionmail operation is on behalf of an administrator or manager...

CVE-2024-50702

TeamPass before 3.1.3.1 does not properly check whether a mailme aka actionmail operation is on behalf of an administrator or manager...

PT-2024-34393 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: TeamPass versions prior to 3.1.3.1 Description: The issue arises from the software not properly checking if a mail me also known as action mail operation is performed on behalf of an administrator or manager. This lack of verification can lea...

CVE-2024-50702

Summary: CVE-2024-50702 affects TeamPass prior to 3.1.3.1. The vulnerability arises from improper authorization checks in the mail_me/action_mail operation, allowing an unauthorized actor to perform actions intended for administrators or managers. Documents consistently describe this as an author...

CVE-2024-50702

TeamPass before 3.1.3.1 does not properly check whether a mailme aka actionmail operation is on behalf of an administrator or manager...