CVE-2026-57229

Suricata's SMTP MIME parser (rust/src/mime/smtp.rs) in versions 8.0.0 through 8.0.6 fails to fully reset state when processing Content-Type: message/rfc822 encapsulation. An outer MIME part's filename or Content-Transfer-Encoding state leaks into the inner message, allowing a crafted email to byp...

CVE-2026-57228

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

安全披露：facil.io MIME 解析器中的越界读取导致服务器崩溃 指定 CVE ID CVE-2026-66729 产品： facil.io 受影响版本： facil.io = 0.6.0（所有 0.6.x、所有 0.7.x、master）；该问题随 0.6.0 中新增的 MIME 解析器引入 组件： lib/facil/http/parsers/httpmimeparser.h CWE： CWE-191（整数下溢）、CWE-125（越界读取） CVSS v3.1： 7.5（AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H） 研究人员： Theodosis...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-110877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110877 advisory. A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an...

CVE-2026-57228: Out-of-bounds Read

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...

CVE-2026-57229: Improper Initialization

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SMTP MIME parser in rust/src/mime/smtp.rs does not fully reset state when processing Content-Type: message/rfc822 encapsulation. An outer MIME part's...

Johnny-You-Are-Fired

Johnny-You-Are-Fired USENIX 论文的配套材料 | 完整论文 此处 摘要 OpenPGP 和 S/MIME 是加密和数字签名电子邮件的两大标准。数字签名本应保证消息的真实性和完整性。在这项工作中，我们展示了针对各种 OpenPGP 和 S/MIME 电子邮件签名验证实现的五类实际可行的伪造攻击：1 我们分析了 S/MIME 容器格式中的边界情况。2 我们利用了最广泛使用的 OpenPGP 实现 GnuPG API 中的带内信令。3 我们应用 MIME 包装攻击，滥用电子邮件客户端对部分签名消息的处理。4 我们分析了签名消息与发送者身份绑定中的弱点。5...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

sudowp-postgallery

SudoWP PostGallery Security Fork Contributors: SudoWP, WP Republic Original Authors: RTO GmbH Tags: gallery, security, patched, cve-2025-13543 Requires at least: 5.8 Tested up to: 6.7 Stable tag: 1.12.6 License: GPLv2 or later Security Notice This is a security-hardened fork of the abandoned...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime-is-broken

用于生成和测试畸形 MIME 的工具包 这是一个工具包，用于生成带有损坏 MIME 的邮件，以测试 MUA 和安全产品的行为，即它们是否一致，或者损坏的 MIME 是否可用于绕过安全产品。 文件 tools/ 用于创建损坏邮件和进行测试的工具。参见其中的 README.md 预生成的邮件位于 hide-content.d 和 hide-filename.d hide-content.d/ 包含用于隐藏内容 eicar.zip 的生成邮件的 Maildir hide-filename.d/ 包含用于隐藏真实文件名 file.zip 的生成邮件的 Maildir libtests/...

CVE-2026-84639

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used...

CVE-2026-34975

CVE-2026-34975 — CRLF Email Header Injection in Plunk via raw MIME construction Severity : High CVSS 8.5 CWE : CWE-93 — Improper Neutralization of CRLF Sequences 'CRLF Injection' Affected : useplunk/plunk = 0.7.1 Fixed in : 0.8.0 Advisory : GHSA-2mvm-rg5v-7hfq NVD :...

CVE-2026-42879

CVE-2026-42879 - FacturaScripts - 通过 MIME 类型绕过实现已认证的不受限制文件上传 摘要 FacturaScripts 的产品图片上传功能中存在一个已认证的不受限制文件上传漏洞。拥有有效凭据的攻击者可以上传伪装成 GIF 图片（使用 GIF89a 文件头）的 PHP 文件，从而绕过 MIME 类型验证。该文件会以其原始扩展名存储，包括 .php 等可执行扩展名。 详细信息 该漏洞存在于： Core/Lib/ExtendedController/ProductImagesTrait.php 具体位于 addImageAction 方法中。 漏洞代码...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | 未授权任意文件上传 研究方： Atomic Edge 严重程度： 严重 | CVSS： 9.8 | 需认证： 否 ⚠️ v2 — 已根据社区反馈进行技术修正。 详情请参见更新日志。 概述 BookingPress Pro WordPress 插件（版本 ≤ 5.6）中存在一个严重的未授权任意文件上传漏洞。预约提交处理器 bookingpressbookappointmentbooking 将签名字段值作为 data URI 处理。插件通过正则表达式从 URI 的 MIME...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload

CVE-2025-3914 - Aeropage Sync for Airtable WordPress 中的任意文件上传漏洞 描述 Aeropage Sync for Airtable WordPress 插件（≤ v3.2.0）由于 aeropagemediadownloader 函数中文件类型验证不足，存在经过身份验证的任意文件上传 漏洞。 攻击向量 ：经过身份验证（订阅者+权限） 影响 ：通过恶意文件上传实现远程代码执行（RCE） CVSS 评分 ：8.8（高危） CVE ID ：CVE-2025-3914 漏洞代码 该插件未能正确验证： 1. 文件扩展名 2. MIME 类型...

CVE-2026-40487

CVE-2026-40487 - Postiz 服务器仅验证 Content-Type 头（CWE-345） - 文件以原始 .svg 扩展名保存到磁盘（CWE-434） - nginx 以 image/svg+xml 提供服务 - 浏览器执行嵌入的 JavaScript（CWE-79） - 同源：完全访问受害者的会话 影响 XSS 载荷在同源 下与应用一起执行。即使认证 Cookie 是 HttpOnly，fetch 配合 credentials: "include" 也会自动附加该 Cookie。攻击者可以： 窃取受害者的个人资料、API 密钥、所有已连接社交账户的 OAuth 令...