CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - ExpectスクリプトPOC 正当なメールを送信しますが、そのメールの中に他の多くのメール（異なる送信者、受信者、件名など）が含まれています。 最初のメールはSPF/DKIM/DMARCでチェックされますが、内部の他のメールはチェックされません！ 使用法: ./cve-2023-51764.sh mx.fqdn port ./cve-2023-51764.sh mail.mydomain.com 25 注意事項: chmod +x cve-2023-51764.sh expect アプリケーションが必要...

CVE-2023-51764

PoC for CVE-2023-51764 SMTP SMUGGLING Postfix CVE-2023-5176525.py 説明 このスクリプトは、メールサーバーの25番ポートを使用してメッセージを送信できます。 使用方法 実行前に変数を変更する必要があります： smtpserver - メールサーバーのアドレス fromaddress - 最初のメールの送信者 toaddress - 最初のメールの受信者 username - 認証用のログイン password - 認証用のパスワード body - メッセージ メッセージ本文には2つの変数があります mail FROM...

CVE-2026-94057

A flaw was found in Exim. A remote attacker could exploit a vulnerability known as SMTP smuggling by sending crafted data after a rejection during the DATA processing phase. This manipulation could lead to a mismatch between the intended sent message and the actual received message, potentially...

CVE-2023-51764-POC

ベース https://github.com/duy-31/CVE-2023-51764 および https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text これは、Python 3.x に移植された単なるPoCです。...

EUVD-2026-83615

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

Linux Distros Unpatched Vulnerability : CVE-2026-94057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

DEBIAN-CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

UBUNTU-CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

CVE-2026-94057

Exim MTA versions before 4.100.1 are vulnerable to SMTP smuggling : the received message does not match any sent message and instead depends on crafted data sent after a rejection during DATA processing. The vulnerability is reachable over the network without authentication but requires high atta...

CVE-2026-94057: Improper Neutralization of CRLF Sequences

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

Astra Linux – Vulnerability in sendmail

Sendmail in version 8.17.2 allows for SMTP smuggling in certain configurations. Remote attackers can utilize a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, thereby bypassing an SPF protection mechanism. This issue arises because Sendmail supports...

MGASA-2026-0385 Updated dovecot package fixes security vulnerabilities

submission-login: Panic when mailmaxuseripconnections is reached: Panic: epollctldel, 8 failed: Bad file descriptor. CVE-2026-33263 Dovecot IMAP LIST matchsub Exponential Backtracking — CPU Denial of Service. CVE-2026-33607 DoS by sending mail with bad header. CVE-2026-27852 dsync: Mail content c...

CVE-2026-48019 CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound...

CVE-2026-48019 CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound...

CVE-2026-48019

Laravel (PHP web framework) prior to versions 12.60.0 and 13.10.0 is affected by a CRLF injection vulnerability in its default email validation (validateEmail() and Address.php), in combination with how Symfony Mailer and Symfony Mime handle certain character sequences. An unauthenticated attacke...