713 matches found
More PayPal emails hijacked to deliver tech support scams
Scammers have found another way to get deceptive messages delivered through PayPal’s legitimate services. In December 2025, we reported that PayPal closed a loophole that let scammers send real emails with fake purchase notices. In those cases, scammers created a PayPal subscription and then paus...
📄 listmonk Session Persistence
listmonk has a flaw where sessions persist as valid after password reset and password change. CVE-2026-34828 listmonk’s Session Persistence After Password Reset and Password Change Intro I found this issue while reviewing listmonk, an open-source newsletter and mailing list manager, with a simple...
CVE-2026-24027
creationtimestamp| type| source ---|---|--- 2026-02-10 10:00:10+00:00| seen| https://seclists.org/oss-sec/2026/q1/159...
CVE-2005-1419
SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Adminid parameter...
CVE-2023-40160
Directory traversal vulnerability exists in Mailing List Search CGI pmmls.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a remote attacker may obtain arbitrary files on the server...
CVE-2003-1313
Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager EMLM 1.32 allow remote attackers to execute arbitrary PHP code via a URL in 1 the emmladminpath parameter to admin/auth.php or 2 the emmlpath parameter to emmlemailfunc.php...
CVE-2021-33038
An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be available on the web for an hour during...
CVE-2025-68280
creationtimestamp| type| source ---|---|--- 2026-01-05 14:18:24+00:00| seen| https://seclists.org/oss-sec/2026/q1/17 2026-01-05 15:30:46+00:00| seen| https://gist.github.com/Darkcrai86/1f974350056ca093e9738c65c3452ad1 2026-01-05 15:55:46+00:00| seen|...
CVE-2025-67895
creationtimestamp| type| source ---|---|--- 2025-12-16 15:13:17+00:00| seen| https://seclists.org/oss-sec/2025/q4/280 2025-12-17 13:42:16+00:00| seen| https://gist.github.com/Darkcrai86/3e68b0ba666c48a6963c4bbdca1c90c3 2025-12-17 15:12:00+00:00| seen|...
CVE-2025-61661
creationtimestamp| type| source ---|---|--- 2025-11-18 18:38:59+00:00| seen| https://seclists.org/oss-sec/2025/q4/198 2025-11-18 21:58:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wqbwr4cr2w 2026-03-19 00:00:00+00:00| seen|...
CVE-2016-7420
creationtimestamp| type| source ---|---|--- 2025-11-14 16:40:35+00:00| seen| https://seclists.org/oss-sec/2025/q4/180...
GHSA-MGRM-G92Q-F8H8
creationtimestamp| type| source ---|---|--- 2025-11-11 17:50:55+00:00| seen| https://seclists.org/oss-sec/2025/q4/164...
CVE-2025-64458
creationtimestamp| type| source ---|---|--- 2025-11-05 14:33:40+00:00| seen| https://seclists.org/oss-sec/2025/q4/147 2025-11-05 16:48:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4vivmdsys2h 2025-11-05 20:08:20+00:00| seen|...
CVE-2025-11232
creationtimestamp| type| source ---|---|--- 2025-10-29 16:56:58+00:00| seen| https://seclists.org/oss-sec/2025/q4/98 2025-10-29 21:34:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4efnkgkdi2q 2025-10-30 06:58:11+00:00| seen|...
CVE-2025-12204
creationtimestamp| type| source ---|---|--- 2025-10-27 19:03:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/79...
CVE-2025-58147
creationtimestamp| type| source ---|---|--- 2025-10-21 10:02:37+00:00| seen| https://seclists.org/oss-sec/2025/q4/65 2025-10-21 12:35:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3pdsf3t522b 2025-12-17 14:06:40+00:00| seen|...
CVE-2025-62228
creationtimestamp| type| source ---|---|--- 2025-10-09 13:48:50+00:00| seen| https://seclists.org/oss-sec/2025/q4/20...
EUVD-2008-5949
Malware in sbrugna...