Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-41770

Malicious code in bioql PyPI...

8.2CVSS8.1AI score0.00272EPSS
Exploits1References2
NVD
NVD
added 2022/09/27 3:15 p.m.8 views

CVE-2022-39258

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to stea...

8.2CVSS0.00272EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/09/27 3:10 p.m.8 views

CVE-2022-39258 mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to stea...

8.1CVSS8.3AI score0.00272EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/09/27 3:10 p.m.6 views

CVE-2022-39258 mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to stea...

8.1CVSS8.3AI score0.00272EPSS
Exploits1References2
CVE
CVE
added 2022/09/27 3:10 p.m.356 views

CVE-2022-39258

The CVE-2022-39258 issue affects mailcow (mailserver suite) prior to 2022-09, where an attacker could craft a custom Swagger API template to spoof Authorize links, potentially redirecting victims to an attacker-controlled page to steal Swagger authorization credentials or enable phishing. Root ca...

8.2CVSS8AI score0.00272EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/09/27 3:10 p.m.13 views

CVE-2022-39258 mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI

mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to stea...

8.1CVSS7.9AI score0.00272EPSS
Exploits1References4
Rows per page
Query Builder