CVE-2019-7214

CVE-2019-7214 SmarterMail システムの .NET デシリアライゼーションにおけるリモートコード実行。 コレクション このリポジトリには、このエクスプロイトの Proof of Concept コレクションが含まれています。一部は変更なしでそのまま動作するものもあれば、変更が必要なものもあります。...

CVE-2019-7214

Windows 反向 Shell 漏洞利用（基于 TCP 的 PowerShell） 此 Python 脚本针对远程 Windows 计算机上运行的一个易受攻击的服务。它发送一个序列化的 .NET 负载，该负载在攻击者的计算机上启动基于 PowerShell 的反向 shell。 CVE-2019-7214 SmarterMail 系统中 .NET 反序列化的远程代码执行。 ⚙️ 配置 更新脚本的配置部分以匹配您的环境： root@kitploit: HOSTNAME = 'hostname' 目标主机名（通过 /etc/hosts 解析） PORT = 9999 目标监听序列化输入的端口...

Metasploit Weekly Wrap-Up

Authentication bypass in Wordpress Plugin WooCommerce Payments This week's Metasploit release includes a module for CVE-2023-28121 by h00die. This module can be used against any wordpress instance that uses WooCommerce payments 5.6.1. This module exploits an auth by-pass vulnerability in the...

SmarterTools SmarterMail Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SmarterTools SmarterMail less than build 6985 - .NET Deserialization Remote Code Execution', 'Description' = %q This module exploits a...

CVE-2019-7214

creationtimestamp| type| source ---|---|--- 2023-07-10 23:19:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/smartermailrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:17+00:00| seen|...

Exploit for Deserialization of Untrusted Data in Smartertools Smartermail

CVE-2019-7214 Remote Code Execution in .NET deseria...

SmarterMail Build 6985 - Remote Code Execution Exploit

Exploit Title: SmarterMail Build 6985 - Remote Code Execution Exploit Author: 1F98D Original Author: Soroush Dalili Date: 10 May 2020 Vendor Hompage: re CVE: CVE-2019-7214 Tested on: Windows 10 x64 References:...

SmarterMail Build 6985 - Remote Code Execution

Exploit Title: SmarterMail Build 6985 - Remote Code Execution Exploit Author: 1F98D Original Author: Soroush Dalili Date: 10 May 2020 Vendor Hompage: re CVE: CVE-2019-7214 Tested on: Windows 10 x64 References:...

SmarterMail 6985 Remote Code Execution

Exploit Title: SmarterMail Build 6985 - Remote Code Execution Exploit Author: 1F98D Original Author: Soroush Dalili Date: 10 May 2020 Vendor Hompage: re CVE: CVE-2019-7214 Tested on: Windows 10 x64 References:...

CVE-2019-7214

CVE-2019-7214 is a deserialization vulnerability in SmarterTools SmarterMail prior to build 6985. The issue arises from deserializing untrusted data via .NET remoting endpoints exposed on port 17001 (notably /Servers, /Mail, /Spool), allowing an unauthenticated attacker to execute arbitrary comma...

CVE-2019-7214

SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch...