Lucene search
+L

11944 matches found

Patchstack
Patchstack
•added 2025/09/09 11:05 p.m.•21 views

WordPress Maspik plugin <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export vulnerability

Authenticated Subscriber+ Missing Authorization to Spam Log Export vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Maspik – Spam blacklist versions = 2.5.6...

4.3CVSS6.7AI score0.00252EPSS
SaveExploits0References1Affected Software1
Krebs on Security
Krebs on Security
•added 2025/09/06 3:23 a.m.•16 views

GOP Cries Censorship Over Spam Filters That Work

The chairman of the Federal Trade Commission FTC last week sent a letter to Google's CEO demanding to know why Gmail was blocking messages from Republican senders while allegedly failing to block similar missives supporting Democrats. The letter followed media reports accusing Gmail of...

6.8AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/03 11:12 p.m.•18 views

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.

...

6.3CVSS9.2AI score0.00342EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/28 12:00 a.m.•34 views

PT-2025-34988

Name of the Vulnerable Software and Affected Versions: Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress versions through 11.58 Description: The plugin is susceptible to unauthorized data access due to an inadequate capability check within the...

6.5CVSS6.3AI score0.00356EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•7 views

CVE-2025-9376: Incorrect Authorization

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to an insufficient capability check on the 'stopbadbotscheckwordpressloggedincookie' function in all versions up to, and including, 11.58. This...

6.5CVSS5.7AI score0.00356EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/23 12:23 a.m.•17 views

CVE-2024-45438

An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8.01.x before 8.01.14. The file quarantine.php within the SpamTitan interface allows unauthenticated users to trigger account-level actions using a crafted GET request. Notably, when a non-existent emai...

9.1CVSS7.2AI score0.00563EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/08/22 12:00 a.m.•20 views

The vulnerability of Microsoft Exchange Server servers arises from the improper handling of an additional special element, which allows attackers to perform spoofing attacks.

The vulnerability of Microsoft Exchange Server servers is related to the improper handling of an additional special element. Exploiting this vulnerability allows a malicious actor to perform spam attacks remotely...

5.3CVSS5.7AI score0.00892EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/08/22 12:00 a.m.•20 views

The vulnerability of Microsoft Exchange Server servers stems from improper syntax validation during input processing, allowing attackers to execute spoofing attacks.

The vulnerability of Microsoft Exchange Server is related to improper validation of syntax correctness in input data. Exploiting this vulnerability allows a malicious actor to perform spam attacks remotely...

5.3CVSS5.7AI score0.00874EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/21 9:23 p.m.•13 views

CVE-2025-55029

Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks. This vulnerability was fixed in Firefox for iOS 142...

7.5CVSS5.8AI score0.00337EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/08/21 10:41 a.m.•13 views

Hackers Using New QuirkyLoader Malware to Spread Agent Tesla, AsyncRAT and Snake Keylogger

Cybersecurity researchers have disclosed details of a new malware loader called QuirkyLoader that's being used to deliver via email spam campaigns an array of next-stage payloads ranging from information stealers to remote access trojans since November 2024. Some of the notable malware families...

5.6AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/08/21 10:41 a.m.•18 views

Hackers Using New QuirkyLoader Malware to Spread Agent Tesla, AsyncRAT and Snake Keylogger

Cybersecurity researchers have disclosed details of a new malware loader called QuirkyLoader that's being used to deliver via email spam campaigns an array of next-stage payloads ranging from information stealers to remote access trojans since November 2024. Some of the notable malware families...

7.7AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/08/21 12:00 a.m.•6 views

CVE-2024-45438

An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8.01.x before 8.01.14. The file quarantine.php within the SpamTitan interface allows unauthenticated users to trigger account-level actions using a crafted GET request. Notably, when a non-existent emai...

7.1AI score0.00563EPSS
SaveExploits0References4
Trellix
Trellix
•added 2025/08/21 12:00 a.m.•34 views

The Silent, Fileless Threat of VShell

The Silent, Fileless Threat of VShell By Sagar Bade · August 21, 2025 Introduction Linux environments are often seen as bastions of security, favored by developers, sysadmins, and security professionals for their stability, transparency, and resistance to malware. Compared to Windows, the attack...

6.5AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/08/21 12:00 a.m.•16 views

Barracuda Spam & Virus Firewall 安全漏洞

Barracuda Spam & Virus Firewall is an email security gateway from Barracuda USA. A security vulnerability exists in Barracuda Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to 2010.10, which stems from a path traversal in the viewhelp.cgi endpoint that could lead to...

8.7CVSS6.6AI score0.01671EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2025/08/19 9:15 p.m.•29 views

CVE-2025-55029

Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks This vulnerability affects Firefox for iOS 142...

7.5CVSS6.7AI score0.00337EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/19 9:15 p.m.•13 views

CVE-2025-55029

Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks This vulnerability affects Firefox for iOS 142...

7.5CVSS5.8AI score0.00337EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/19 9:15 p.m.•17 views

CVE-2025-55029

Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks. This vulnerability was fixed in Firefox for iOS 142...

7.5CVSS0.00337EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/19 8:52 p.m.•24 views

CVE-2025-55029 Malicious scripts could spam popups for denial of service attacks

Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks. This vulnerability was fixed in Firefox for iOS 142...

0.00337EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/19 8:52 p.m.•70 views

CVE-2025-55029

The Mozilla Firefox for iOS browser is vulnerable to a flaw where malicious scripts can bypass the popup blocker to spam new tabs. This behavior can lead to denial of service (DoS) attacks by preventing user interaction. The vulnerability affects versions prior to 142 . This issue has been resolv...

7.5CVSS5.7AI score0.00337EPSS
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in curiouscat-spam (npm)

The package curiouscat-spam was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder