CVE-2025-26794

CVE-2025-26794: Exim 4.98의 블라인드 SQL 인젝션 SQLite DBM - 익스플로잇 분석 Exim 보고서: https://www.exim.org/static/doc/security/CVE-2025-26794.txt 이 취약점은 수동 코드 리뷰를 통해 발견했습니다. 취약점 상세: 문제점 SQLite가 DBM으로 사용될 때 SQL 파라미터가 제대로 처리되지 않습니다. 이로 인해 원격 사용자가 사용자 정의 SQLite 쿼리를 조작할 가능성이 생깁니다. 요구 사항: "USESQLITE = yes"로 Exim을...

CVE-2025-26794-exploit

CVE-2025-26794: Exim ETRN SQLインジェクションエクスプロイト CVE-2025-26794の概念実証エクスプロイトツール。SQLite DBMストレージ使用時にETRNコマンド経由でExim 4.98メールサーバーに存在するSQLインジェクションの脆弱性を示します。 ⚠️ 法的免責事項 認可されたセキュリティテスト専用 このツールは、教育目的および認可されたペネトレーションテスト専用に提供されています。許可なくコンピュータシステムにアクセスすることは、以下の法律を含むさまざまな法律で違法となります： 米国のComputer Fraud and Abuse...

Astra Linux – Vulnerability in exim4

Exim 4.98 before 4.98.1 allowed remote SQL injection when SQLite hints and ETRN serialization were used. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

📄 Exim 4.98 SQL Injection

A vulnerability exists in Exim version 4.98 when ETRN input is serialized and passed to a SQLite backend. Time‑based SQL injection allows attackers to detect conditions in SQL execution measuring response latency...

Exploit for SQL Injection in Exim

CVE-2025-26794: Exim ETRN SQL Injection Exploit !Python Vers...

EUVD-1999-1090

Malware in sbrugna...

EUVD-2000-0488

Malware in sbrugna...

Exim 4.98 SQL Injection

Exim versions 4.98 before 4.98.1 suffer from a remote SQL injection vulnerability. CVE 2025-26794 - Sat, 08 Feb 2025 21:14:37 +0100: reported - by: "Oscar Bataille" - to: [email protected] - Sun, 9 Feb 2025 00:00:05 +0100: report confirmed - Tue, 11 Feb 2025 00:23:34 +0100: issue confirmed - Tue,...

Exim 4.98 SQL Injection Vulnerability

Exim versions 4.98 before 4.98.1 suffer from a remote SQL injection vulnerability. CVE 2025-26794 - Sat, 08 Feb 2025 21:14:37 +0100: reported - by: "Oscar Bataille" - to: email protected - Sun, 9 Feb 2025 00:00:05 +0100: report confirmed - Tue, 11 Feb 2025 00:23:34 +0100: issue confirmed - Tue, 1...

Vulnerabilities include SQLite hint functions and ETRN serialization of the Exim mail server, which allows attackers to cause service interruptions.

The vulnerabilities of SQLite’s hints and Exim mail server’s ETRN serialization are related to the lack of measures taken to protect the SQL query structure. Exploiting these vulnerabilities can allow a malicious actor to cause service failures by sending specially crafted SQL queries...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection...

Exploit for CVE-2025-26794

CVE-2025-26794: Blind SQL injection in Exim 4.98 SQLite DBM...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

DEBIAN-CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

UBUNTU-CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection...

CVE-2025-26794

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

exim -- SQL injection

[email protected] reports: Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection...

PT-2025-7615

Name of the Vulnerable Software and Affected Versions Exim versions 4.98 through 4.98.0 Description The issue allows remote SQL injection when SQLite hints and ETRN serialization are used. This could potentially allow a remote attacker to perform SQL injection, possibly stealing sensitive data or...

Exim 安全漏洞

Exim is an open source messaging agent MTA from Exim Open Source that runs on Unix systems and is responsible for routing, forwarding and delivering mail. A security vulnerability exists in Exim prior to version 4.98.1 that stems from allowing remote SQL injection when using SQLite hints and ETRN...