hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

vhosts-sieve

VHosts Sieve Searching for virtual hosts among non-resolvable domains. Installation git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt Usage Get a list of subdomains e.g. using Amass $ amass enum -v -passive -o domains.txt -d example.com -d...

pesieve-go

pesieve-go Golang bindings for PE-sieve. Requires pe-sieve32.dll, pe-sieve64.dll of a supported version to be present in the project directory, or in a path pointed by the environment variable: PESIEVEDIR. API Exposes the following wrappers for PE-sieve API: PESieveVersion uint32 func PESieveHelp...

CLEANSTART-2026-QJ33129 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4

Security vulnerability affects the py3-soupsieve package. Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4...

CLEANSTART-2026-NQ39461 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4

Security vulnerability affects the py3-soupsieve package. Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4...

CLEANSTART-2026-CP67144 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4

Security vulnerability affects the tensorflow-gpu-jupyter package. Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4...

CLEANSTART-2026-YQ29004 Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4

Security vulnerability affects the tensorflow-gpu-jupyter package. Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4...

[SECURITY] Fedora 45 Update: pim-sieve-editor-26.08.2-1.fc45

Sieve Editor is an editor for Sieve scripts used for email filtering on a mail server...

NativeMirror

NativeMirror NativeMirror is an independent Object Pascal implementation of PE-sieve functionality, adapted from PE-sieve by hasherezade. It scans process memory, detects modified or injected code, and dumps PE files. The implementation uses Delphi-native APIs and NativePe as its PE engine. It ca...

CentOS Linux 7 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (CENTOS7:CLSA-2026:1792764059)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792764059 advisory. - An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing cod...

CLSA-2026-1792596933 dovecot: Fix of CVE-2026-42007

CVE-2026-42007: pigeonhole: sieve editheader: reset header-index first pointers before rebuilding the index and copy raw header data with memcpy instead of istrndup...

AlmaLinux 9.6 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (ALMALINUX9.6:CLSA-2026:1792596933)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792596933 advisory. - An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing...

Rocky Linux 9.6 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (ALMALINUX9.6:CLSA-2026:1792596933)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792596933 advisory. - An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editi...

CVE-2026-107568

Missing authorization in the Sieve notify action 6.2.22 through 6.3.6 and in the mail-rule Reply action 6.0.0 through 6.3.6 of Progressive Robot hMailServer allows an authenticated user to send mail through the server as any address. A Sieve notify sends a notification message, and its :from tag...

CVE-2026-107569

Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying mail. The server bounds the mail it generates in response to a message - a rule forward, reply or copy, an account forward, a Sieve...

CVE-2026-107566

Missing authorization in the Sieve editheader action 6.2.22 through 6.3.6 and in the mail-rule Set header value action 6.0.0 through 6.3.6 of Progressive Robot hMailServer allows an authenticated user to make the server send mail as any address, DKIM-signed where the address is at a domain the...

EUVD-2026-104409

Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying mail. The server bounds the mail it generates in response to a message - a rule forward, reply or copy, an account forward, a Sieve...

CVE-2026-107566 Missing Authorization in hMailServer

Missing authorization in the Sieve editheader action 6.2.22 through 6.3.6 and in the mail-rule Set header value action 6.0.0 through 6.3.6 of Progressive Robot hMailServer allows an authenticated user to make the server send mail as any address, DKIM-signed where the address is at a domain the...

EUVD-2026-104408

Missing authorization in the Sieve editheader action 6.2.22 through 6.3.6 and in the mail-rule Set header value action 6.0.0 through 6.3.6 of Progressive Robot hMailServer allows an authenticated user to make the server send mail as any address, DKIM-signed where the address is at a domain the...

CVE-2026-107566

Progressive Robot hMailServer versions 6.2.22 through 6.3.6 are vulnerable to a missing authorization flaw in the Sieve editheader action and the mail-rule Set header value action (v6.0.0 through 6.3.6). This allows an authenticated user to manipulate headers such as From , Sender , and DKIM-Sign...