CVE-2025-48046 – Apache HTTP Server SMTP Server Password Disclosure Vulnerability

May 29, 2025

CVE ID : CVE-2025-48046

Published : May 29, 2025, 1:15 p.m. | 16 minutes ago

Description : An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-48047 – NetFax Server Command Injection Vulnerability

Next Article CVE-2025-48045 – Apache Client Default Admin Credentials Disclosure

Highlights

CVE-2025-5215 – D-Link DCS-5020L Stack-Based Buffer Overflow Vulnerability

May 26, 2025

CVE ID : CVE-2025-5215

Published : May 27, 2025, 12:15 a.m. | 42 minutes ago

Description : A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01_B2. This affects the function websReadEvent of the file /rame/ptdc.cgi. The manipulation of the argument Authorization leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-48046 – Apache HTTP Server SMTP Server Password Disclosure Vulnerability

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

CVE-2025-4418 – AVEVA PI Connector for CygNet Privilege Escalation Vulnerability

CVE-2025-53367: DjVuLibre Vulnerability Opens Path to Linux Desktop Code Execution, PoC Available!

Rilasciata Ubuntu 25.04 “Plucky Puffin”: Arriva con GNOME 48 e kernel Linux 6.14

Try Firefox’s Experimental Link Previews with AI Summary

CVE-2025-5215 – D-Link DCS-5020L Stack-Based Buffer Overflow Vulnerability

IBM THINK: IBM introduces new tools to help with scaling AI agents across the enterprise

Too many open browser tabs? This is still my favorite solution – and has been for years

Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

CVE-2025-48046 – Apache HTTP Server SMTP Server Password Disclosure Vulnerability

Related Posts