CVE-2024-23824 mailcow ipixel flood attack leads to Denial of Service in admin page

mailcow is a dockerized email package, with multiple containers linked in one bridged network. The application is vulnerable to pixel flood attack, once the payload has been successfully uploaded in the logo the application goes slow and doesn't respond in the admin page. It is tested on the...

CVE-2023-31274

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A file upload vulnerability exists in ZZCMS version 2023, which stems from the lack of valid validation of uploaded files in /Ebak5.1/upload/index.php. An attacker can exploit this vulnerability to gain server privileges and...

Cross site scripting

Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting XSS vulnerability has been identified within the Quarantine UI of the system. This vulnerability poses a significant threat to administrators who utilize the Quarantine feature. An attacker can sen...

CVE-2023-49077 mailcow-dockerized XSS Vulnerability in Quarantine UI Allows Unauthorized Access and Data Manipulation

Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting XSS vulnerability has been identified within the Quarantine UI of the system. This vulnerability poses a significant threat to administrators who utilize the Quarantine feature. An attacker can sen...

Adobe Acrobat Reader Resource Management Error Vulnerability

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in Adobe Acrobat Reader version 2023.001.20174, which originates from a post-release reuse in Thermometer Javascrip...

PT-2023-24740 · Easyuse · Easyuse Mailhunter Ultimate

Name of the Vulnerable Software and Affected Versions: EasyUse MailHunter Ultimate versions 2023 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the ctl00$ContentPlaceHolder1$txtCustSQL parameter in the create customer group function. Thi...

PT-2023-24737 · Easyuse · Easyuse Mailhunter Ultimate

Name of the Vulnerable Software and Affected Versions: EasyUse MailHunter Ultimate versions 2023 and earlier Description: The issue allows remote authenticated users to perform arbitrary system commands with ‘NT AuthoritySYSTEM‘ privilege via a crafted ZIP archive. This is due to an unrestricted...

CVE-2023-44168

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SySS TEF portal cross-site scripting vulnerability

SySS TEF portal is an online store system from SySS Germany. A security vulnerability exists in SySS TEF portal version 2023-07-17, which stems from a stored cross-site scripting vulnerability...

SySS TEF portal code issue vulnerability

SySS TEF portal is an online store system from SySS Germany. A security vulnerability exists in SySS TEF portal version 2023-07-17, which stems from a remote code execution vulnerability...

CVE-2023-39372

StarTrinity Softswitch version 2023-02-16 - Multiple CSRF CWE-352...

CVE-2023-39370

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39371

StarTrinity Softswitch version 2023-02-16 - Open Redirect CWE-601...

CVE-2023-39369

StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS CWE-79...

Cross site request forgery (csrf)

StarTrinity Softswitch version 2023-02-16 - Multiple CSRF CWE-352...

Open redirect

StarTrinity Softswitch version 2023-02-16 - Open Redirect CWE-601...

StarTrinity Softswitch Cross-Site Scripting Vulnerability

StarTrinity Softswitch is a highly reliable softswitch from StarTrinity. A cross-site scripting vulnerability exists in StarTrinity Softswitch version 2023-02-16, which can be exploited by an attacker to inject malicious scripts into web sites...

PT-2023-26899 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to a Persistent XSS CWE-79 in StarTrinity Softswitch. Recommendations: For StarTrinity Softswitch version 2023-02-16, at the moment, there is no information about a...