GO-2024-3016 Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2...

SUSE CVE-1999-0163

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

GHSA-R6QH-J42J-PW64 Beego privilege escalation vulnerability

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in the beego/core/logs/smtp.go file...

Beego privilege escalation vulnerability

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in the beego/core/logs/smtp.go file...

CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...

CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...

CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...

CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...

CVE-2024-40464

CVE-2024-40464 affects beego v2.2.0 and earlier. A remote attacker can escalate privileges via the sendMail function in beego/core/logs/smtp.go due to improper validation in OpenSSL certificate handling. Public sources describe privilege escalation through this path, with IBM/X-Force listing a hi...

PT-2024-28857 · Beego · Beego

Name of the Vulnerable Software and Affected Versions: beego versions 2.2.0 and earlier Description: An issue in beego allows a remote attacker to escalate privileges via the sendMail function located in the beego/core/logs/smtp.go file. Recommendations: For beego versions 2.2.0 and earlier,...

CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...

CVE-2024-6431

The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing capability check in the 'sendMail' function in all versions up to, and including, 2.10.13. This makes it possible for authenticated attackers, with subscriber-lev...

WordPress plugin Media.net Ads Manager has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability...

PT-2024-37621 · WordPress · Media.Net Ads Manager

Name of the Vulnerable Software and Affected Versions: Media.net Ads Manager plugin for WordPress versions up to, and including, 2.10.13 Description: The issue arises from missing file type validation and a missing capability check in the sendMail function, allowing authenticated attackers with...

CVE-2024-6431: Unrestricted Upload of File with Dangerous Type

The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing capability check in the 'sendMail' function in all versions up to, and including, 2.10.13. This makes it possible for authenticated attackers, with subscriber-lev...

Photon OS 5.0: Sendmail PHSA-2024-5.0-0192

An update of the sendmail package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0192. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Sendmail PHSA-2022-3.0-0382

An update of the sendmail package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0382. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Sendmail PHSA-2022-4.0-0173

An update of the sendmail package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0173. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Sendmail PHSA-2024-4.0-0560

An update of the sendmail package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0560. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MGASA-2024-0270 Updated sendmail packages fix security vulnerability

sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports . but some other...