CVE-2025-48046 – Apache HTTP Server SMTP Server Password Disclosure Vulnerability

May 29, 2025

CVE ID : CVE-2025-48046

Published : May 29, 2025, 1:15 p.m. | 16 minutes ago

Description : An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-48047 – NetFax Server Command Injection Vulnerability

Next Article CVE-2025-48045 – Apache Client Default Admin Credentials Disclosure

Highlights

CVE-2025-4182 – PCMan FTP Server Buffer Overflow Vulnerability

May 2, 2025

CVE ID : CVE-2025-4182

Published : May 1, 2025, 11:15 p.m. | 4 hours, 12 minutes ago

Description : A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component BELL Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 10 Use Cases of Vibe Coding in Large-Scale Node.js Applications

Cloudsmith launches ML Model Registry to provide a single source of truth for AI models and datasets

Kong Acquires OpenMeter to Unlock AI and API Monetization for the Agentic Era

Microsoft Graph CLI to be retired

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

The Xbox remaster that brought Gears to PlayStation just passed a huge milestone — “ending the console war” and proving the series still has serious pulling power

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Updates from N|Solid Runtime: The Best Open-Source Node.js RT Just Got Better

Scale Your Business with AI-Powered Solutions Built for Singapore’s Digital Economy

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

CVE-2025-48046 – Apache HTTP Server SMTP Server Password Disclosure Vulnerability

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Pennsylvania Attorney General’s Office Recovers from Ransomware Attack

Power bank slapped with a recall? Stop using it now – here’s why

Microsoft 365 installs via Windows Store will stop getting updates

CVE-2025-32925 – FantasticPlugins SUMO Reward Points PHP Remote File Inclusion

Kdenlive 25.08 Enhances Audio Mixer, Adds 10-bit H.265 Support

CVE-2025-4182 – PCMan FTP Server Buffer Overflow Vulnerability

CVE-2025-5198 – Stackrox XSS Vulnerability in Role Object Name

CVE-2025-2766 – 70mai A510 Default Password Authentication Bypass

Four trends reshaping Kubernetes platform engineering

CVE-2025-48046 – Apache HTTP Server SMTP Server Password Disclosure Vulnerability

Related Posts