Linux Distros Unpatched Vulnerability : CVE-2021-33038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in management/commands/hyperkittyimport.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives...

CVE-2025-54812

creationtimestamp| type| source ---|---|--- 2025-08-22 16:22:58+00:00| seen| https://seclists.org/oss-sec/2025/q3/134 2025-08-22 18:48:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwz4ocotud2y 2025-08-22 19:01:44+00:00| seen|...

CVE-2025-9143

A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailinglists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public a...

CVE-2025-5115

creationtimestamp| type| source ---|---|--- 2025-08-20 19:47:18+00:00| seen| https://seclists.org/oss-sec/2025/q3/131 2025-08-24 11:21:47+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lx5emgvatk2o 2025-08-24 12:01:58+00:00| seen|...

CVE-2025-54988

creationtimestamp| type| source ---|---|--- 2025-08-20 17:48:13+00:00| seen| https://seclists.org/oss-sec/2025/q3/129 2025-08-20 17:50:44+00:00| seen| https://seclists.org/oss-sec/2025/q3/130 2025-08-20 20:54:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwucq4fdbu2h...

CVE-2025-9143 Scada-LTS mailing_lists.shtm cross site scripting

A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailinglists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public a...

CVE-2025-9143 Scada-LTS mailing_lists.shtm cross site scripting

A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailinglists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public a...

CVE-2025-9143 Scada-LTS mailing_lists.shtm cross site scripting

A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailinglists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public a...

Scada-LTS 代码注入漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A code injection vulnerability exists in Scada-LTS version 2.7.8.1, which stems from a cross-site scripting attack due to incorrect manipulation of the parameters name/userList/address in the file...

PT-2025-33741 · Scada-Lts · Scada-Lts

Name of the Vulnerable Software and Affected Versions: Scada-LTS version 2.7.8.1 Description: A security flaw exists in Scada-LTS 2.7.8.1 related to the mailing lists.shtm file. Manipulation of the name/userList/address argument can lead to cross-site scripting. This issue is potentially...

CVE-2025-55672

creationtimestamp| type| source ---|---|--- 2025-08-14 10:55:20+00:00| seen| https://seclists.org/oss-sec/2025/q3/106 2025-08-14 13:15:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwegcyka5d2y...

CVE-2025-53859

creationtimestamp| type| source ---|---|--- 2025-08-13 16:14:44+00:00| seen| https://seclists.org/oss-sec/2025/q3/98 2025-08-13 18:50:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwcikot7oi22 2025-08-14 22:03:28+00:00| seen|...

Scammers mass-mailing the Efimer Trojan to steal crypto

Introduction In June, we encountered a mass mailing campaign impersonating lawyers from a major company. These emails falsely claimed the recipient's domain name infringed on the sender's rights. The messages contained the Efimer malicious script, designed to steal cryptocurrency. This script als...

security-advisories

OCaml Security Advisory Database The OCaml Security Advisory...

CVE-2025-50036

Cross-Site Request Forgery CSRF vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Cross Site Request Forgery.This issue affects Mailing Group Listserv: from n/a through = 3.0.5...

CVE-2025-50036

Cross-Site Request Forgery CSRF vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Cross Site Request Forgery.This issue affects Mailing Group Listserv: from n/a through = 3.0.5...

CVE-2025-50036

CVE-2025-50036 concerns the WordPress plugin “Mailing Group Listserv” (versions ≤ 3.0.5). The root cause is a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to perform actions on behalf of an authenticated user without their consent. The CVE entry cites a CVSS v3.1 b...

CVE-2025-50036 WordPress Mailing Group Listserv plugin <= 3.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Cross Site Request Forgery.This issue affects Mailing Group Listserv: from n/a through = 3.0.5...

CVE-2025-50036 WordPress Mailing Group Listserv plugin <= 3.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Yamna Khawaja Mailing Group Listserv allows Cross Site Request Forgery. This issue affects Mailing Group Listserv: from n/a through 3.0.5...

PT-2025-26389 · Unknown · Mailing Group Listserv

Name of the Vulnerable Software and Affected Versions: Yamna Khawaja Mailing Group Listserv versions 3.0.5 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Mailing Group Listserv, allowing unauthorized actions to be performed on behalf of the user. Recommendations: For...