CVE-2022-26432

CVE-2022-26432 affects MediaTek-based devices where a mailbox out-of-bounds write due to a missing bounds check can enable local privilege escalation with System privileges. Public details consistently describe the issue without user interaction; no exploit details are provided in the documents. ...

CVE-2022-26431

CVE-2022-26431 affects the MediaTek mailbox controller and is described as an out-of-bounds write caused by a missing bounds check. The issue could allow local escalation of privilege to System level with no user interaction required. Documented impact is high for confidentiality, integrity, and ...

CVE-2022-26431

In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032553; Issue ID: ALPS07032553...

CVE-2022-26430

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521...

CVE-2022-26430

CVE-2022-26430 affects MediaTek devices with a mailbox type confusion leading to out-of-bounds write. This can enable local privilege escalation to SYSTEM level with no user interaction required. Patch ALPS07032521 (Issue ALPS07032521) referenced in multiple sources; no remediation details beyond...

PT-2022-17841 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information cannot be determined. Description: The issue is related to a possible out of bounds write in the mailbox due to a missing bounds check. This could lead to local escalation of...

PT-2022-17843 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information cannot be determined. Description: The issue is related to a possible out of bounds write in the mailbox due to a missing bounds check. This could lead to local escalation of...

MediaTek mailbox 缓冲区错误漏洞

MediaTek mailbox is a mailbox controller from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek mailbox that stems from a lack of boundary checking, which could allow out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

PT-2022-17840 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in the mailbox due to a missing bounds check. This could lead to local escalation of privilege,...

MediaTek mailbox 安全漏洞

MediaTek mailbox is a mailbox controller from MediaTek, a Chinese company. A security vulnerability exists in MediaTek mailbox that stems from a lack of boundary checking, which may allow out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

PT-2022-17839 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so: Affected software affected versions not specified Description: The issue is related to a possible out of bounds write due to type confusion in the mailbox. This could lead to local escalatio...

CVE-2022-31138

mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be exploited by manipulating the custom parameters regexmess, skipmess, regexflag, delete2foldersonly, delete2foldersbutnot, regextrans2, pipemess, or maxlinelengthcmd to execute...

Privilege escalation

mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be exploited by manipulating the custom parameters regexmess, skipmess, regexflag, delete2foldersonly, delete2foldersbutnot, regextrans2, pipemess, or maxlinelengthcmd to execute...

Cross site scripting

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

Security Bulletin: IBM Sterling Global Mailbox is vulnerable to remote code execution due to Apache Log4j (CVE-2021-4104)

Summary Apache Log4j is used by IBM Sterling Global Mailbox as part of its logging infrastructure. This fix includes Apache Log4j v2.17.1. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused by the...

Malicious code in voicemail-mailbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bc0683e7f3f0afa76661bc671c4e0b3fa44ecc5ec828f4a58ea3df2198c186e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6959 Malicious code in voicemail-mailbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bc0683e7f3f0afa76661bc671c4e0b3fa44ecc5ec828f4a58ea3df2198c186e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31470

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...

CVE-2022-31470

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...

CVE-2022-31470

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...