CVE-2022-41871 – SEPPmail Root Command Injection Vulnerability

April 28, 2025

CVE ID : CVE-2022-41871

Published : April 28, 2025, 4:15 p.m. | 2 hours, 50 minutes ago

Description : SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root.

Severity: 6.0 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2023-35814 – DevExpress ASP.NET XtraReport Data Serialization Deserialization Vulnerability

Next Article CVE-2015-4582 – TheCartPress Boot Store WordPress Header PHP TCP Register Error XSS

Highlights

CVE-2025-6931 – D-Link DCS-6517 DCS-7517 Insufficient Entropy in Root Password Generation Handler

June 30, 2025

CVE ID : CVE-2025-6931

Published : June 30, 2025, 11:15 p.m. | 2 hours, 24 minutes ago

Description : A vulnerability classified as problematic was found in D-Link DCS-6517 and DCS-7517 up to 2.02.0. Affected by this vulnerability is the function generate_pass_from_mac of the file /bin/httpd of the component Root Password Generation Handler. The manipulation leads to insufficient entropy. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity: 3.7 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

I replaced my Samsung OLED TV with this Sony Mini LED model for a week – and didn’t regret it

I tested the most popular robot mower on the market – and it was a $5,000 crash out

5 gadgets and accessories that leveled up my gaming setup (including a surprise console)

Why I’m patiently waiting for the Samsung Z Fold 8 next year (even though the foldable is already great)

Performance Analysis with Laravel’s Measurement Tools

Performance Analysis with Laravel’s Measurement Tools

Memoization and Function Caching with this PHP Package

Laracon US 2025 Livestream

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

With Windows 10’s fast-approaching demise, this Linux migration tool could let you ditch Microsoft’s ecosystem with your data and apps intact — but it’s limited to one distro

Windows 10 is 10 years old today — let’s look back at 10 controversial and defining moments in its history

CVE-2022-41871 – SEPPmail Root Command Injection Vulnerability

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

Tea App Data Breach: 72,000 Selfies and IDs of Women Leaked Online

Double Fine announced its new game, and I’m so ready to play as a sentient lighthouse

CVE-2025-20991 – Android Bluetooth Improper Export of Components Vulnerability

Podcast Feature: Cyber Governance, Supply Chain Risk & Awareness with Zahid Altaf

CVE-2025-25025 – IBM Security Guardium Information Disclosure Vulnerability

CVE-2025-6931 – D-Link DCS-6517 DCS-7517 Insufficient Entropy in Root Password Generation Handler

CVE-2025-36014 – IBM Integration Bus for z/OS Code Injection Vulnerability

Need a new laptop for the office? Save $400 on the Dell 16 Plus and improve your workflow

GitHub for Beginners: Building a React App with GitHub Copilot

CVE-2022-41871 – SEPPmail Root Command Injection Vulnerability

Related Posts