CVE-2026-108121

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from...

CVE-2026-108120

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

CVE-2026-108120

Koozali SME Server version 11.0rc1-215 is vulnerable to a path traversal vulnerability in its View Logs functionality. This flaw allows an unauthenticated attacker to access files outside the intended directory, potentially resulting in the exfiltration of sensitive system and application files ....

EUVD-2026-104070

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

CVE-2026-108120 path traversal inKoozali - SME Server

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

CVE-2026-108120 path traversal inKoozali - SME Server

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

CVE-2026-108121 Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from...

EUVD-2026-104069

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from...

CVE-2026-108121

Koozali's SME Server version 11.0rc1-215 contains an improper input validation vulnerability within its domain creation functionality . An attacker with high privileges can exploit this flaw to inject reserved Apache configuration directives , which corrupts the httpd.conf file. This corruption p...

CVE-2026-108121 Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from...

CVE-2026-108121: Improper Input Validation

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from...

CVE-2026-108120: Path Traversal: 'dir\..\..\filename'

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

PT-2026-117225

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

PT-2026-117226

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from...

Koozali SME Server path traversal vulnerability

The Koozali SME Server version 11.0rc1-215 has a path traversal vulnerability. This vulnerability stems from a path traversal issue in the View Logs function, which may allow unauthenticated attackers to access files outside of the intended directories. This could result in the disclosure of...

Koozali SME Server has a vulnerability related to input validation errors.

The Koozali SME Server version 11.0rc1-215 has a security vulnerability. This vulnerability stems from the domain creation feature, which allows high-privilege attackers to inject reserved Apache configuration directives, damaging the httpd.conf file. As a result, Apache cannot be started after t...

EUVD-2017-1355

Malware in sbrugna...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

Open redirect

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...