Usermin versions up to 2.570 let a remote sender attach files whose names contain directory tricks (like "../"). When the recipient downloads all attachments, those tricked names…
Too many irrelevant or confusing CVEs? Use stackflag.com
#usermin #webmin #CVE #infosec
Usermin versions up to 2.570 let a remote sender attach files whose names contain directory tricks (like "../"). When the recipient downloads all attachments, those tricked names…
Too many irrelevant or confusing CVEs? Use stackflag.com
#usermin #webmin #CVE #infosec
Usermin versions up to 2.570 let a user who is logged in create a mail folder with special characters and then delete it, causing the server to run arbitrary commands. This can give…
Too many irrelevant or confusing CVEs? Use stackflag.com
#usermin #webmin #CVE #infosec
Usermin versions up to 2.570 let a user who is logged in create a mail folder with special characters and then delete it, causing the server to run arbitrary commands. This can give…
Too many irrelevant or confusing CVEs? Use stackflag.com
#usermin #webmin #CVE #infosec
📊 8.6/10
🏢 Webmin
📝 Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated attackers to write files outsid...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-118297
#cybersecurity #infosec #cve #euvd
📊 8.6/10
🏢 Webmin
📝 Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated attackers to write files outsid...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-118297
#cybersecurity #infosec #cve #euvd
CVE ID : CVE-2015-2079
Published : April 28, 2025, 3:15 p.m. | 24 minutes ago
Description : Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument...
CVE ID : CVE-2015-2079
Published : April 28, 2025, 3:15 p.m. | 24 minutes ago
Description : Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument...
This article provides a step-by-step guide to installing Usermin on Ubuntu 24.04. Usermin offers a simplified web-based interface for users to manage their mail and other services without full server access. The installation involves preparing the system with…
This article provides a step-by-step guide to installing Usermin on Ubuntu 24.04. Usermin offers a simplified web-based interface for users to manage their mail and other services without full server access. The installation involves preparing the system with…
CVSS N/A
A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.
#security #infosec #cve-alert
CVSS N/A
A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.
#security #infosec #cve-alert
CVSS N/A
Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of...
#security #infosec #cve-alert
CVSS N/A
Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of...
#security #infosec #cve-alert
Discover the latest Usermin 2.100 exploit for username enumeration, tested on Kali Linux. Uncover potential vulnerabilities with this guide. CVE-2024-44762 included!
thenimblenerd.com?p=1041618
Discover the latest Usermin 2.100 exploit for username enumeration, tested on Kali Linux. Uncover potential vulnerabilities with this guide. CVE-2024-44762 included!
thenimblenerd.com?p=1041618