CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

CVE-2025-7962 affects Jakarta Mail 2.0.2 and enables SMTP injection by CRLF-based message separation. IBM connected advisories confirm the issue in IBM WebSphere Liberty-backed deployments and IBM PowerVM Novalink/PowerVC Novalink, with remediation by upgrading affected products to specific fixed...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7624

An SQL injection vulnerability in the legacy transparent SMTP proxy of Sophos Firewall versions older than 21.0 MR2 21.0.2 can lead to remote code execution, if a quarantining policy is active for Email and SFOS was upgraded from a version older than 21.0 GA...

CVE-2025-7624

An SQL injection vulnerability in the legacy transparent SMTP proxy of Sophos Firewall versions older than 21.0 MR2 21.0.2 can lead to remote code execution, if a quarantining policy is active for Email and SFOS was upgraded from a version older than 21.0 GA...

PT-2025-30273 · Sophos · Sophos Firewall

Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 21.0 MR2 21.0.2 Description: An SQL injection vulnerability exists in the legacy transparent SMTP proxy. Successful exploitation can lead to remote code execution if a quarantining policy is active for Email...

PT-2025-30321

Name of the Vulnerable Software and Affected Versions Jakarta Mail version 2.2 Description The software is susceptible to a SMTP Injection issue. This can be triggered by utilizing the carriage return r and newline UTF-8 characters to separate messages. Recommendations At the moment, there is no...

Sophos Firewall 安全漏洞

Sophos Firewall is a firewall from Sophos UK. A security vulnerability exists in Sophos Firewall versions prior to 21.0.2, which stems from a SQL injection issue in the SMTP proxy that could lead to remote code execution...

CVE-2025-48301

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce SMTP for SendGrid – YaySMTP smtp-sendgrid allows SQL Injection.This issue affects SMTP for SendGrid – YaySMTP: from n/a through = 1.5...

CVE-2025-54043

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce SMTP for Amazon SES smtp-amazon-ses allows SQL Injection.This issue affects SMTP for Amazon SES: from n/a through = 1.9...

WordPress SMTP for SendGrid – YaySMTP plugin <= 1.5 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Lê Quốc Bảo in WordPress Plugin SMTP for SendGrid – YaySMTP versions = 1.5...

WordPress SMTP for Amazon SES plugin <= 1.9 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Lê Quốc Bảo in WordPress Plugin SMTP for Amazon SES versions = 1.9...

CVE-2025-54043

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YayCommerce SMTP for Amazon SES smtp-amazon-ses allows SQL Injection.This issue affects SMTP for Amazon SES: from n/a through = 1.9...

CVE-2025-48301

CVE-2025-48301 is an SQL Injection vulnerability in the WordPress plugin SMTP for SendGrid – YaySMTP (versions = 1.6. Connected documents corroborate the vulnerability and patch trajectory; no exploits are detailed in the provided material.

CVE-2025-54043

CVE-2025-54043 : WordPress SMTP for Amazon SES (YayCommerce SMTP) contains a SQL Injection in versions n/a through 1.9 due to improper neutralization of special elements in SQL commands. The CVSS v3.1 score is 7.6 (HIGH) with network attack vector, low attack complexity, and user interaction requ...

PT-2025-29764 · Yaycommerce · Yaycommerce Smtp For Amazon Ses

Name of the Vulnerable Software and Affected Versions: YayCommerce SMTP for Amazon SES versions n/a through 1.9 Description: A SQL Injection issue exists in YayCommerce SMTP for Amazon SES. The vulnerability is due to improper neutralization of special elements used in an SQL command...

curl: CRLF injection in libcurl's SMTP client via --mail-from and --mail-rcpt allows SMTP command smuggling

Summary: libcurl's SMTP client is vulnerable to CRLF injection via the --mail-from and --mail-rcpt parameters. An attacker can inject newline characters to smuggle SMTP commands like VRFY, potentially enabling user enumeration or protocol abuse. While curl may fail after injection, the injected...