Lucene search
K

7 matches found

OSV
OSV
added 2026/02/16 4:15 a.m.3 views

CVE-2026-2534

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub44AC4C of the file /cgi-bin/mbox-config?method=SET&section=ptestbandwidth. The manipulation of the argument bandwidth leads to command injection. The attack can be initiated remotely. The exploit h...

8.8CVSS5.6AI score0.00517EPSS
Exploits1References4
Rapid7 Blog
Rapid7 Blog
added 2024/12/11 6:44 p.m.5 views

Modular Java Backdoor Dropped in Cleo Exploitation Campaign

Many thanks to Rapid7 MDR and incident response teams for their contributions to this analysis. While investigating incidents related to Cleo software exploitation, Rapid7 Labs and MDR observed a novel, multi-stage attack that deploys an encoded Java Archive JAR payload. Our investigation reveale...

9.8CVSS10AI score0.94011EPSS
Exploits6
Positive Technologies
Positive Technologies
added 2021/07/13 12:0 a.m.2 views

PT-2021-3894

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to an information disclosure vulnerability in Microsoft Exchange Server, associated with weaknesses in the authentication procedure. This vulnerability...

7.8CVSS8.8AI score0.9375EPSS
Exploits2References26
Prion
Prion
added 2019/02/18 6:29 p.m.19 views

Design/Logic Flaw

An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting - Mailbox configuration - Registration email template" screen, and uploading an image file, as demonstrated by a .php filename and the "Content-Type: image/gif" header...

7.5CVSS9.7AI score0.00842EPSS
Exploits1References1Affected Software1
Citrix
Citrix
added 2017/07/03 12:0 a.m.5 views

SecureMail: Configuring Multiple Mailboxes

The requirement is to configure personal mailbox and a shared mailbox on Secure Mail for Android and iOS...

7AI score
Exploits0
securityvulns
securityvulns
added 2009/05/29 12:0 a.m.71 views

Novell Groupwise fails to properly sanitize emails.

Affected product ---------------- Novell Groupwise webaccess Affected software: 7.x and 8.0 Vulnerability details --------------------- Groupwise WebAccess implements a security parser designed to prevent embedded scripts in HTML emails from executing in the users's browser. Unfortunately this...

4.3CVSS6.2AI score0.00757EPSS
Exploits1
0day.today
0day.today
added 2005/06/02 12:0 a.m.27 views

e-Post SPA-PRO 4.01 (imap) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= e-Post SPA-PRO 4.01 imap Remote Buffer Overflow Exploit ========================================================= // // e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer...

7.1AI score
Exploits0
Rows per page
Query Builder