2807 matches found
GO-2022-0602 Email relay in Apache Traffic Control in github.com/apache/trafficcontrol
Email relay in Apache Traffic Control in github.com/apache/trafficcontrol...
GO-2023-2072 Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc...
CVE-2024-41936
The CVE-2024-41936 vulnerability concerns Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters (affected: software version 3.3.23.6.9 and prior) where a Directory Traversal flaw allows an unauthenticated remote attacker to read arbitrary files and bypass authentication. Connected source...
CVE-2024-41960
mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling the attacker to execute arbitrary scrip...
CVE-2024-41960
CVE-2024-41960 affects mailcow: dockerized (Relay Hosts configuration). An authenticated admin can inject a JavaScript payload into the Relay Hosts config, and the payload executes in the user’s browser when the configuration page is viewed, enabling arbitrary script execution in the user context...
CVE-2024-41960 Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized
mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling the attacker to execute arbitrary scrip...
CVE-2024-41960 Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized
mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling the attacker to execute arbitrary scrip...
CVE-2024-41960 Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized
mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling the attacker to execute arbitrary scrip...
Improper Authorization
bostr is vulnerable to Improper Authorization.The vulnerability is due improper validation which lets any user access the api even when the authorizedkeys and noscraper is set to true. Attackers can exploit this by gaining access to the relay without proper authorization...
PT-2024-5829 · Mailcow · Mailcow
Name of the Vulnerable Software and Affected Versions: mailcow: dockerized versions prior to 2024-07 Description: The issue is related to the Relay Hosts configuration, where an authenticated admin user can inject a JavaScript payload. This payload is executed when the configuration page is viewe...
mailcow 安全漏洞
mailcow is a mail server suite from mailcow open source. A security vulnerability exists in versions prior to mailcow 2024-07 that originates from an authenticated administrator user being able to inject a JavaScript payload into the relay host configuration, which could allow an attacker to...
CVE-2024-41962 Bostr Improper Authorization
Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...
CVE-2024-41962
Bostr (nostr relay aggregator proxy) is affected by an Improper Authorization vulnerability prior to version 3.0.10. When noscraper is enabled, the system lets anyone in even if authorized_keys are set, effectively bypassing access controls. The issue is fixed in 3.0.10. Connected sources also de...
CVE-2024-41962 Bostr Improper Authorization
Bostr is an nostr relay aggregator proxy that acts like a regular nostr relay. bostr let everyone in even having authorizedkeys being set when noscraper is set to true. This vulnerability is fixed in 3.0.10...
The vulnerability of SIPROTEC relay protection devices, related to insufficiently secure data encryption, allows attackers to carry out “man-in-the-middle” attacks.
The vulnerability of SIPROTEC relay protection devices is related to insufficiently secure data encryption. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out “man-in-the-middle” attacks using specially crafted packets sent to port 4443/tcp...
PT-2024-29516 · Cybonet · Cybonet Pineapp Mail Relay
Name of the Vulnerable Software and Affected Versions: Cybonet PineApp Mail Relay versions prior to 5.2.1 rev 20jun24 Description: The issue concerns an improper limitation of a pathname to a restricted directory, which may lead to unauthorized access risks. There is an urgent need for action to...
BIT-SYNCTHING-2021-21404 Crash due to malformed relay protocol message
Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...
Malicious code in relay-website (npm)
--- -= Per source details. Do not edit below this line.=-...