12 matches found
CVE-2026-111106 Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter
The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...
PT-2026-115437
The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...
EUVD-2026-100081
Integer overflow or wraparound in Windows Resource Management MRM allows an authorized attacker to elevate privileges locally...
CVE-2026-87702
A vulnerability in Windows Resource Management (MRM) involving an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high base severity score of 7.8. No specific patch versions, workarounds, or exploit detail...
Windows Resource Management (MRM) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Resource Management MRM allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-87702: Windows Resource Management (MRM) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Resource Management MRM allows an authorized attacker to elevate privileges locally...
CVE-2026-87702: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Resource Management MRM allows an authorized attacker to elevate privileges locally...
SUSE-RU-2024:3971-1 Recommended update for mojo-parent
This update for mojo-parent fixes the following issues: xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed integer truncation issue when processing malicious XSLT stylesheets bsc1201684 - Changes and Bugs fixed: Java 8 is now the minimum requirement...
MAL-2024-2677 Malicious code in @sbermarketing/mrm-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sbermarketing/mrm-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
Exploit for Deserialization of Untrusted Data in Microsoft
This is a weaponized tool for exploiting the Microsoft Exchange 2010 MRM.AutoTag.Model unsafe deserialize vulnerability, identified as CVE-2020-17144. The tool is written in C and uses the .NET framework 3.5. The tool consists of two files: e.cs and cve-2020-17144.cs. The e.cs file is a simple C...
