370 matches found
CVE-2026-40686
CVE-2026-40686 affects Exim before 4.99.2 when utf8 operators are enabled. The vulnerability is an out-of-bounds read triggered by large UTF-8 trailing characters in malformed UTF-8 header data, with the potential for information disclosure via an error message produced during handling of an unre...
Exim 安全漏洞
Exim is an open-source message transfer agent MTA developed by Exim Foundation and running on Unix systems. It primarily handles the routing, forwarding, and delivery of emails. Prior to Exim 4.99.2, there was a security vulnerability. This vulnerability occurred due to an exception in the octal...
EUVD-2026-26444
In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present malformed UTF-8 header data. Information might be divulged within an error message produced during handling of an unrelated e-mail message...
Exim 缓冲区错误漏洞
Exim is an open-source message transfer agent MTA developed by Exim Software. It operates on Unix-based systems and is primarily responsible for routing, forwarding, and delivering emails. Prior to Exim 4.99.2, there was a buffer error vulnerability. This vulnerability stemmed from the JSON...
CVE-2026-40685
In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping...
Exim 缓冲区错误漏洞
Exim is an open-source message transfer agent MTA developed by Exim Software, running on Unix systems. It primarily handles the routing, forwarding, and delivery of emails. Versions of Exim prior to 4.99.2 contained a buffer error vulnerability. This vulnerability stemmed from the utf8 operator’s...
CVE-2026-40684
In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...
CVE-2026-40684
In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...
Exploit for OS Command Injection in Exim
Cr.Exim 4.87 - 4.91 - Local Privilege Escalation Cr.Link: https...
CVE-2025-67896
Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records are cast directly to internal structures without validation...
CVE-2025-67896
Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records are cast directly to internal structures without validation...
📄 Exim 4.98 SQL Injection
A vulnerability exists in Exim version 4.98 when ETRN input is serialized and passed to a SQLite backend. Time‑based SQL injection allows attackers to detect conditions in SQL execution measuring response latency...
PT-2025-51144
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.99.1 Description Exim software contains a flaw that allows for remote heap corruption. Further details about this issue will be disclosed on 2025-12-18. Recommendations Update to version 4.99.1 or later...
Exploit for SQL Injection in Exim
CVE-2025-26794: Exim ETRN SQL Injection Exploit !Python Vers...
exim-4.98.2-4.1 on GA media (moderate)
exim-4.98.2-4.1 on GA media Announcement ID: openSUSE-SU-2025:15626-1 Rating: moderate Cross-References: CVE-2025-53881 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the exim-4.98.2-4.1...
EUVD-2014-2994
Malware in sbrugna...
EUVD-2017-1528
Malware in sbrugna...
EUVD-2020-20507
Malware in sbrugna...