20 matches found
CVE-2026-92140
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint...
EUVD-2026-80764
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint...
CVE-2026-92140
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint...
CVE-2026-92140
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint...
CVE-2026-92140
The Jenkins Gitee Plugin (version 1301.v8957053c7902 and earlier) is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the failure to escape the sender name from Gitee push webhook payloads in build causes. Attackers capable of triggering builds via the Jenkins Gi...
Stored XSS vulnerability in gitee
gitee 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to trigger builds via the gitee webhook endpoint. gitee 1304.v2702f1d71cde escapes t...
Astra Linux – Vulnerability in Thunderbird
When displaying the sender of an email, if the sender’s name contained multiple Braille space characters, Thunderbird would display all those spaces. This could be exploited by an attacker to send an email message with the attacker’s digital signature, where the signature was displayed along with...
CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)
The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...
EUVD-2026-65340
The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...
CVE-2024-44730
Incorrect access control in the function handleDataChannelChatdataMessage of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name...
CVE-2024-44730
The video conferencing software Mirotalk is vulnerable to an incorrect access control flaw in the handleDataChannelChat(dataMessage) function. This issue exists in versions prior to commit c21d58 and allows an attacker to forge chat messages by using an arbitrary sender name. No specific exploit ...
DEBIAN-CVE-2022-1834
When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker's digital signature, that was shown...
CVE-2022-37452
Exim before 4.95 has a heap-based buffer overflow for the alias list in hostnamelookup in host.c when senderhostname is set...
Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird displays all spaces. This flaw allows an attacker to send an ema...
Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird displays all spaces. This flaw allows an attacker to send an ema...
PT-2022-3645
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 91.10 Description The issue arises when displaying the sender of an email, specifically if the sender name contains the Braille Pattern Blank space character multiple times. This could be exploited by an attacker ...
CVE-2018-14478
ecard.php in Coppermine Photo Gallery CPG 1.5.46 has XSS via the sendername, recipientemail, greetings, or recipientname parameter...
PT-2019-9026
Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery version 1.5.46 Description The issue concerns an XSS vulnerability in the ecard.php file. It can be exploited via the sender name, recipient email, greetings, or recipient name parameters. Recommendations For Coppermin...
Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability
Document Title: =============== Yahoo Bug Bounty 37 - Sender Spoofing Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1781 Video: https://www.vulnerability-lab.com/getcontent.php?id=1985 Release Date: ============= 2016-03-07 Vulnerability...
PT-2011-3160
Name of the Vulnerable Software and Affected Versions PHP-Nuke versions 8.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the sender name or sender email parameter in a Feedback action to "modules.php" API endpoint. This can lead to cross-sit...