EUVD-2026-101754

Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding. Attackers can supply large recipient lists or long headers that fold into tens of thousands of continuation lines,...

CVE-2026-110871

The Nodemailer library (versions 3.0.0 to before 10.0.10 ) is vulnerable to a Denial of Service attack via the MessageParser.parseHeaders function. The root cause is quadratic header unfolding , where attackers provide long headers or large recipient lists that expand into tens of thousands of co...

EUVD-2016-10748

Malware in sbrugna...

CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

CVE-2016-9963: Undefined Security Weakness

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

[SECURITY] [DSA 3747-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3747-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 25, 2016 https://www.debian.org/security/faq -...

DSA-3747-1 exim4 - security update

Bulletin has no description...

PT-2016-7890

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.87.1 Description The issue allows remote attackers to obtain the private DKIM signing key. This is related to vectors involving log files and bounce messages. Recommendations For versions prior to 4.87.1, update to...

Mail Server In a Box

Mail-Box : Mass electronic surveillance by governments revealed over the last year has spurred a new movement to re-decentralize the web, that is, to empower netizens to be their own service providers again. SMTP, the protocol of email, is decentralized in principle but highly centralized in...