EUVD-2020-19099

Malware in sbrugna...

EUVD-2019-8831

Malware in sbrugna...

EUVD-2019-8832

Malware in sbrugna...

CVE-2019-19199

REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...

CVE-2019-19200

REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...

CVE-2020-26554

REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...

CVE-2020-26554

REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...

Design/Logic Flaw

REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...

CVE-2020-26554

REDDOXX MailDepot 2033 (2.3.3022) is affected by a persistent Cross-site Scripting (XSS) in incoming HTML e-mails (CWE-79). The SySS advisory SYSS-2020-037 indicates the vulnerability arises from processing HTML mail, allowing script execution in the context of the user’s browser when viewing mes...

CVE-2020-26554

REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...

MailDepot 2033 2.3.3022 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2020-037 Product: MailDepot Manufacturer: REDDOXX GmbH Affected Versions: 2033 2.3.3022 Tested Versions: 2033 2.3.3022 Vulnerability Type: Persistent Cross-site Scripting CWE-79 Risk Level: High Solution Status: Open Manufacturer...

CVE-2019-19200

REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...

CVE-2019-19200

REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...

Design/Logic Flaw

REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...

CVE-2019-19200

REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...

CVE-2019-19200

REDDOXX MailDepot 2032 SP2 (version 2.2.1242) is affected by CVE-2019-19200 due to an improper authorization weakness. The vulnerability allows authenticated users to access other users’ mailboxes, effectively an authorization bypass. The issue was disclosed in an advisory (SYSS-2019-048) and pub...

CVE-2019-19199

REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...

CVE-2019-19199

REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...

Session fixation

REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...

CVE-2019-19199

REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...