CVE-2023-48974

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverNameinput parameter...

CVE-2023-48974

Axigen WebMail is affected by a Cross-Site Scripting vulnerability (CVE-2023-48974) in versions prior to 10.3.3.61. The issue allows a remote attacker to escalate privileges by injecting a crafted script via the serverName_input parameter. Public exploit activity exists (e.g., Exploit-DB) and mai...

Axigen Cross-Site Scripting Vulnerability

Axigen is a mail server with groupware and collaboration features from Axigen. A cross-site scripting vulnerability exists in Axigen WebMail version v.10.5.7 and earlier. A remote attacker can exploit this vulnerability to escalate privileges via specially crafted scripts...

PT-2024-13666 · Axigen · Axigen Webmail

Name of the Vulnerable Software and Affected Versions: Axigen WebMail versions prior to 10.3.3.61 Description: The issue allows a remote attacker to escalate privileges via a crafted script to the serverName input parameter. This is a Cross Site Scripting vulnerability. Recommendations: For...

CVE-2024-0938 Tongda OA 2017 delete_webmail.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file /general/email/inbox/deletewebmail.php. The manipulation of the argument WEBBODYIDSTR leads to sql injection. The exploit has been disclosed to the public and may be...

webmail.life.nthu.edu.tw Cross Site Scripting vulnerability OBB-3842612

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in aurora-webmail-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b196e5cdd7ecb9e38cd0eb47dfc5a3b78a6533ffeb8c52c9f43722b3f398a983 The OpenSSF Package Analysis project identified 'aurora-webmail-pro' @ 10.1.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-84 Malicious code in aurora-webmail-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b196e5cdd7ecb9e38cd0eb47dfc5a3b78a6533ffeb8c52c9f43722b3f398a983 The OpenSSF Package Analysis project identified 'aurora-webmail-pro' @ 10.1.0 npm as malicious. It is considered malicious because: - The packag...

webmail.atesticaret.com.tr Cross Site Scripting vulnerability OBB-3829521

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.amcham.gr Cross Site Scripting vulnerability OBB-3829508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.claroempresas.email Cross Site Scripting vulnerability OBB-3829490

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.web-economy.com Cross Site Scripting vulnerability OBB-3829374

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.conecta6.com Cross Site Scripting vulnerability OBB-3829367

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

#StopRansomware: Play Ransomware

Actions to take today to mitigate cyber threats from Play ransomware: 1. Prioritize remediating known exploited vulnerabilities. 2. Enable multifactor authentication MFA for all services to the extent possible, particularly for webmail, VPN, and accounts that access critical systems. 3. Regularly...

webmail.crysteeltruck.com Cross Site Scripting vulnerability OBB-3804996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.dermanoto.com Cross Site Scripting vulnerability OBB-3804710

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.atznet.dk Cross Site Scripting vulnerability OBB-3804547

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.seqc.es Cross Site Scripting vulnerability OBB-3804158

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webmail.delta-yazilim.com Cross Site Scripting vulnerability OBB-3803724

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers

Actions to take today to mitigate malicious cyber activity: 1. Prioritize remediating known exploited vulnerabilities. 2. Employ proper network segmentation. 3. Enable multifactor authentication MFA for all services to the extent possible, particularly for webmail, VPN, and accounts that access...