Skip to content
OpenAdvisories

Vendor

NetWin

3 known vulnerabilities.

Products

SurgeMail 1 SurgeFTP 1 NetWin 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.6
    CVE-2024-11990

    Cross-Site Scripting (XSS) en SurgeMail de NetWin

    A Cross-Site Scripting (XSS) vulnerability in SurgeMail v78c2 could allow an attacker to execute arbitrary JavaScript code via an elaborate payload injected into vulnerable parameters.

    NetWin SurgeMail
  • Medium 6.5
    CVE-2024-7209

    CVE-2024-7209

    A vulnerability exists in the use of shared SPF records in multi-tenant hosting providers, allowing attackers to use network authorization to be abused to spoof the email identify of the sender.

    NetWin Bird NetWin Fastmail