The ELEX HelpDesk & Customer Ticketing System (WSDesk) plugin saves attachments from emails fetched over IMAP into the public uploads directory under the sender-supplied filename, checked only against a case-sensitive four-entry extension denylist. Anyone who can send email to the support mailbox can upload a file with an executable extension... Weiterlesen: Unauthenticated Arbitrary File Upload in ELEX HelpDesk IMAP Attachmen…
Intelligence View
⚡ tsecurity.de Intelligence
Unauthenticated Arbitrary File Upload in ELEX HelpDesk IMAP Attachment Handling
The ELEX HelpDesk & Customer Ticketing System (WSDesk) plugin saves attachments from emails fetched over IMAP into the public uploads directory under the…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
37 Quellen
CVE-2026-68401 | Linux Kernel up to 6.18.41/7.1.5/7.2-rc3 arm_ffa ffa_setup_and_transmit reserved memory corruption
36 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-68399 | Linux Kernel BPF sk_clone use after free (Nessus ID 334405) VVulDB Updatesvor 1 Std.CVE-2026-68381 | Linux Kernel up to 7.2-rc3 ksmbd race condition VVulDB Updatesvor 1 Std.CVE-2026-68329 | Linux Kernel up to 7.2-rc4 IOMMU iommu_completion_wait use after free VVulDB Updatesvor 1 Std.CVE-2026-68404 | Linux Kernel up to 7.1.5/7.2-rc3 cfg80211 nl80211_netlink_notify race condition VVulDB Updatesvor 1 Std.CVE-2026-68323 | Linux Kernel TIPC UDP Bearer net/tipc/udp_media.c cleanup_bearer race condition VVulDB Updatesvor 7 Std.CVE-2026-64305 | Linux Kernel up to 6.12.95/6.18.38/7.1.3 qat use after free
+30
20 Quellen
CVE-2026-106195 | Google Chrome up to 154.0.8037.97 Chromoting access control (WID-SEC-2026-3761)
19 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-106196 | Google Chrome up to 154.0.8037.97 Navigation improper authorization (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106198 | Google Chrome up to 154.0.8037.97 FileSystem improper authorization (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106199 | Google Chrome up to 154.0.8037.97 Actor improper authorization (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106201 | Google Chrome up to 154.0.8037.97 race condition (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106203 | Google Chrome up to 154.0.8037.97 Autofill information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106202 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
+13
13 Quellen
Security: Mehrere Probleme in rust-gst-plugin-reqwest (Fedora)
12 weitere Quellen
PPro-Linuxvor 3 Std.Security: Mehrere Probleme in rust-cargo-rpmstatus (Fedora) PPro-Linuxvor 3 Std.Security: Mehrere Probleme in atuin (Fedora) PPro-Linuxvor 3 Std.Security: Mehrere Probleme in clevis (Fedora) PPro-Linux Securityvor 3 Std.Mehrere Probleme in rust-cargo-deny (Fedora) PPro-Linux Securityvor 3 Std.Mehrere Probleme in rust-resctl-bench (Fedora) PPro-Linux Securityvor 3 Std.Mehrere Probleme in rust-cargo-rpmstatus (Fedora)
+6
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4287774/sicherheitsluecken-cve/unauthenticated-arbitrary-file-upload-in-elex-helpdesk-imap-attachment-handling/