UnjailMe

UnjailMe Un'evasione dalla sandbox basata su: il proof-of-concept CVE-2018-4087 di Rani Idan Zimperium il proof-of-concept dell'overflow di securityd di @cheesecakeufo zeroday, nessuna CVE nota, grazie Abraham! A proposito del PoC di ZIMPERIUM Rani ha usato sbtool di Jonathan Levine per scoprire...

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

Log4JExploitation-VulnerabiliyCVE-2021-44228. Einführung Eine Remote-Code-Execution-Schwachstelle wurde in der Java-Logging-Bibliothek Log4j gefunden. CVE-2021-44228 Diese Schwachstelle hat in der globalen Cyber-Community für Aufsehen gesorgt, seit Wannacry hatten wir keine solche Auswirkung...

CVE-2025-32433

CVE-2025-32433 Una vulnerabilità critica nel server SSH di Erlang/OTP consente l'esecuzione remota di codice non autenticata RCE. Il difetto risiede nel meccanismo di gestione dei messaggi del protocollo SSH, permettendo agli attaccanti di eseguire comandi arbitrari senza richiedere credenziali d...

LibSSH-exploit

LibSSH-exploit CVE-2018-10933 Server ssh vulnerabili - libssh precedente alla versione 0.8.4 Invia un messaggio di autorizzazione utente che consente RCE Uso: ''' Libsshexploit.py '''...

CVE-2021-44228-example

Dies ist ein Beispiel für die Ausnutzung von CVE-2021-44228 Eine Log4J2 RCE-Schwachstelle Ich bin nicht verantwortlich für diesen Code. BITTE nicht böswillig verwenden CVE-2021-44228 : Diese Schwachstelle ermöglicht es Ihnen, beliebigen Code auszuführen, indem Sie eine schädliche Nachricht auf de...

CVE-2018-10933

CVE-2018-10933 - Bypass dell'autenticazione libssh Implementazione Proof-of-Concept per CVE-2018-10933 , una vulnerabilità critica di bypass dell'autenticazione che interessa l'implementazione lato server di libssh. Disclaimer Questo repository è fornito esclusivamente a scopo educativo, per la...

CVE-2026-40203

When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the same mailbox. An attacker that can send mail to a user and can also observe the sizes of that user's IMAP traffic can...

CVE-2026-40203

When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the same mailbox. An attacker that can send mail to a user and can also observe the sizes of that user's IMAP traffic can...

CVE-2026-40017

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that...

EUVD-2026-67666

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that...

CVE-2026-40017

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that...

CVE-2026-40014

An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor...

CVE-2026-40014

CVE-2026-40014 affects Open-Xchange Dovecot , where a crafted message header causes the IMAP THREAD command to consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this results in degradation or denial of service for IMAP. Th...

CVE-2026-40014

An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor...

CVE-2026-33604

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...

CVE-2026-33604

Dovecot (Open-Xchange) contains an SMTP smuggling vulnerability in its outbound relay protection. An attacker who can get Dovecot to relay a message—e.g., via Sieve redirect or submission relay —can craft a line ending in the message body to bypass the protection that normally prevents message co...

CVE-2026-33604

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

CVE-2026-27852

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...

CVE-2026-27852

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit...