PT-2024-14497 · Unknown · Post Smtp Mailer/Email Log

Name of the Vulnerable Software and Affected Versions: Post SMTP Mailer/Email Log versions n/a through 2.8.6 Description: The issue is related to a Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log. Recommendations: For Post SMTP Mailer/Email Log versions n/a through...

WordPress plugin Post SMTP Mailer/Email Log security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

GHSA-XJW3-5R5C-M5PH typo3 Security fix for Flow Swift Mailer package

A remote code execution vulnerability has been found in the Swift Mailer library swiftmailer/swiftmailer recently. See this advisory for details. If you are not using the default mail transport, this particular problem does not affect you. Upgrading is of course still recommended!...

typo3 Security fix for Flow Swift Mailer package

A remote code execution vulnerability has been found in the Swift Mailer library swiftmailer/swiftmailer recently. See this advisory for details. If you are not using the default mail transport, this particular problem does not affect you. Upgrading is of course still recommended!...

WordPress POST SMTP Mailer plugin <= 2.9.3 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability discovered by Le Ngoc Anh in WordPress Plugin Post SMTP versions = 2.9.3...

GHSA-RQ6Q-HJVH-5MWH Flow Swift Mailer package Remote code execution

A remote code execution vulnerability has been found in the Swift Mailer library swiftmailer/swiftmailer recently. See this advisory for details. If you are not using the default mail transport, this particular problem does not affect you. Upgrading is of course still recommended!...

Flow Swift Mailer package Remote code execution

A remote code execution vulnerability has been found in the Swift Mailer library swiftmailer/swiftmailer recently. See this advisory for details. If you are not using the default mail transport, this particular problem does not affect you. Upgrading is of course still recommended!...

PT-2024-40258 · Monolog · Monolog

Name of the Vulnerable Software and Affected Versions: Monolog library affected versions not specified Description: A header injection issue has been identified in the NativeMailerHandler of the Monolog library, potentially allowing an attacker to manipulate email headers when log messages are se...

PT-2024-17998 · WordPress · Mailerlite

Name of the Vulnerable Software and Affected Versions: MailerLite – Signup forms plugin for WordPress versions 1.5.0 through 1.7.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's shortcodes due to insufficient input sanitization and output escaping on user-suppli...

Remote Code Execution

friendsofsymfony1/symfony1 is vulnerable to Remote Code Execution. The vulnerability is due to the ability to abuse the destruct methods in Swift Mailer classes, which can be exploited to execute arbitrary PHP code if a developer unserializes untrusted user input...

Fedora: Security Advisory (FEDORA-2024-3cf9eb64ba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: amavis-2.13.1-1.fc39

amavis is a high-performance and reliable interface between mailer MTA and one or more content checkers: virus scanners, and/or Mail::SpamAssassin Perl module. It is written in Perl, assuring high reliability, portability and maintainability. It talks to MTA via ESMTP or LMTP, or by using helper...

[SECURITY] Fedora 38 Update: amavis-2.13.1-1.fc38

amavis is a high-performance and reliable interface between mailer MTA and one or more content checkers: virus scanners, and/or Mail::SpamAssassin Perl module. It is written in Perl, assuring high reliability, portability and maintainability. It talks to MTA via ESMTP or LMTP, or by using helper...

GHSA-WJV8-PXR6-5F4R Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Summary Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will enable remote code executio...

Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Summary Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will enable remote code executio...

CVE-2024-28859

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...

CVE-2024-28859

Summary: CVE-2024-28859 describes a gadget-chain-based remote code execution in Symfony1 caused by a vulnerable Swift Mailer dependency. The chain relies on deserializing crafted Swift_KeyCache_DiskKeyCache objects containing a sfOutputEscaperArrayDecorator that uses a user-controlled value and a...

CVE-2024-28859 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...

CVE-2024-28859 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...

CVE-2024-28859 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...