94412 matches found
CLSA-2026-1792599451 Fix CVE(s): CVE-2026-109618, CVE-2026-109619
SECURITY UPDATE: code execution via state corruption after an out-of-memory error and via stale global state - debian/patches/CVE-2026-109618.patch: terminate the process on memory limit and allocation overflow errors instead of unwinding, clear request globals at shutdown, disable session upload...
PCLPoC
PCL2 notice.json RCE PoC In-house test This tool is onl...
CVE-2026-114490
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
CVE-2026-114478
Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...
CVE-2026-114489
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
Vulnerability related to trust management issues in HCL AppScan integration with Azure Boards for ASoC & A360
The HCL AppScan integration with Azure Boards for ASoC and A360 version 1.0.0 contains a trust management vulnerability. This vulnerability arises because sensitive information can be accessed in plaintext during pipeline execution. Even though it is masked in the user interface, it may still be...
Roundcube Webmail Project Roundcube Webmail authorization issue vulnerability
The Roundcube Webmail project contains an authorization issue vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from improper authentication in multi-host installations; when logging in using alias addresses, rcubeuser::query fails to restrict matching...
CVE-2026-114490 Incorrect Authorization in hMailServer
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
EUVD-2026-107329
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
CVE-2026-114490 Incorrect Authorization in hMailServer
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
CVE-2026-114490 Incorrect Authorization in hMailServer
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
CVE-2026-114490
Progressive Robot hMailServer versions 6.3.4 through 6.3.6 contain an incorrect authorization vulnerability in the COM administration API . The root cause is that the COM API's server-administrator check fails to respect domain restrictions for accounts with the serveradmin role, treating them as...
CVE-2026-114489 Missing Authorization in hMailServer
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
CVE-2026-114489 Missing Authorization in hMailServer
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
CVE-2026-114489 Missing Authorization in hMailServer
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
EUVD-2026-107328
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
CVE-2026-114489
Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to missing authorization in the REST and COM administration APIs . This flaw allows a remote authenticated user with credentials confined to named domains to modify mail routing and domain configurations outside their scope...
[SECURITY] [DSA 6575-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6575-1 [email protected] https://www.debian.org/security/ Jan MojžÃÅ¡ October 21, 2026 https://www.debian.org/security/faq -...
CVE-2026-114478 Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer
Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...
CVE-2026-114478
Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to an unintended proxy or intermediary flaw (CWE-441 ). Due to insufficient preservation of the original sender during forwarding, an unauthenticated remote attacker can cause the server to deliver mail that appears to pass...