CVE-2012-2593

Atmail XSS-CSRF-RCE एक्सप्लॉइट चेन PoC atmail-rce.py: Atmail के वेबमेल इंटरफ़ेस में CVE-2012-2593 का शोषण करता है। atmail-csrf.js: जावास्क्रिप्ट फ़ाइल जो CVE 2012-2593 को CSRF में बदलती है जो एक दुर्भावनापूर्ण प्लगइन स्थापित करती है जो रिवर्स शेल निष्पादित करता है। Plugin.php: स्थापित किया जाने...

CVE-2025-52691-APT-PoC

CVE-2025-52691 PoC: SmarterMail आर्बिट्ररी फ़ाइल अपलोड RCE APT-एन्हांस्ड यह CVE-2025-52691 के लिए एक एन्हांस्ड प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट है, जो SmarterTools SmarterMail ईमेल सर्वर सॉफ़्टवेयर में एक गंभीर भेद्यता है, जो प्रमाणीकरण के बिना आर्बिट्ररी फ़ाइल अपलोड की अनुमति देती है, संभावित र...

Atmail-exploit-toolchain

AtMail ईमेल सर्वर उपकरण 6.4 - एक्सप्लॉइट टूलचेन XSS CSRF RCE PacketStorm WLB-2020080010 अस्वीकरण: यह एक्सप्लॉइट टूलचेन EDB-ID 20009 से प्रेरित है। लक्ष्य इस एक्सप्लॉइट टूलचेन का लक्ष्य EDB-ID 20009 को प्रतिस्थापित करना है। इस टूलचेन के लाभ EDB-ID 20009 एक्सप्लॉइट की तुलना में: सरल उपयोग पुन:...

CVE-2020-14066

CVE-2020-14066 Icewarp ईमेल सर्वर 12.3.0.1 insecurepermissions https://nvd.nist.gov/vuln/detail/CVE-2020-14066...

CVE-2020-14065

CVE-2020-14065 Icewarp Email Server 12.3.0.1 unlimitedfileupload https://nvd.nist.gov/vuln/detail/CVE-2020-14065...

CVE-2020-14064

Icewarp ईमेल सर्वर 12.3.0.1 गलत पहुँच नियंत्रण https://nvd.nist.gov/vuln/detail/CVE-2020-14064...

CVE-2020-14066

Icewarp Email Server 12.3.0.1 permissions non sécurisées https://nvd.nist.gov/vuln/detail/CVE-2020-14066...

CVE-2020-14065

Icewarp ईमेल सर्वर 12.3.0.1 असीमितफ़ाइलअपलोड https://nvd.nist.gov/vuln/detail/CVE-2020-14065...

EUVD-2026-67673

Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentication fields, so a value sent by that host can be injected as an internal authentication field. Any host permitted to act as a trusted proxy can authenticate as any user without...

CVE-2026-78498

CVE-2026-78498 is a server-side request forgery (SSRF) vulnerability in the WatchGuard Dimension Email Server Test configuration . An authenticated privileged attacker can use this flaw to enumerate exposed network services on adjacent network systems . The CVSS 4.0 score is 5.1 (Medium) , reflec...

CVE-2026-78498 Dimension Server-Side Request Forgery via Email Server Test Settings

A server-side request forgery SSRF vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

PT-2026-78836

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-755AP versions prior to 20260702 Description A command injection flaw exists in the ssi component within the /cgi-bin/email.cgi endpoint. The issue resides in the log email server function, allowing a remote attacker to execute...

CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability

...

EUVD-2026-53317

Paperless-ngx's MailAccountViewSet.test action, when called with an existing account's ID and a masked password field, reuses the stored password, accounttype, refreshtoken, and expiration from that existing account while allowing the caller to supply a different imapserver, imapport, and...

Alt-N MDaemon 20.0.x < 20.0.9 / 21.0.x < 21.0.8 / 21.5.x < 21.5.6 / 22.0.x < 22.0.7 / 23.0.x < 23.0.4 / 23.5.x < 23.5.5 / 24.0.x < 24.0.4 / 24.5.x < 24.5.3 / 25.0.x < 25.0.3 Stored XSS

The remote Windows host is running a version of MDaemon Email Server that is affected by a stored cross-site scripting XSS vulnerability. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript cod...

EUVD-2026-45012

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. This action should have been restricted ...

EUVD-2026-42057

A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized attacker may assume ownership of a user’s account by manipulating this mechanism. ArcGIS Administrators should configure an...

CVE-2026-13020

CVE-2026-13020 affects Esri Portal for ArcGIS up to version 12.1 on Windows, Linux, and Kubernetes. A weak password-recovery mechanism lets a remote, unauthenticated attacker potentially take ownership of a user account by manipulating the recovery flow. The vulnerability’s impact is described as...

PT-2026-56205

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions prior to 12.2 Description A weak password recovery mechanism for forgotten passwords allows a remote, unauthorized attacker to assume ownership of a user account by manipulating the recovery process...