CVE-2026-29780 eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows...

CVE-2026-29780 eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows...

Directory Traversal

Overview eml-parser is a Python EML parser library Affected versions of this package are vulnerable to Directory Traversal via the recursivelyextractattachments.py script when processing email attachments with attacker-controlled filenames. An attacker can write arbitrary files outside the intend...

CVE-2026-29780

creationtimestamp| type| source ---|---|--- 2026-03-04 15:33:56+00:00| published-proof-of-concept| https://github.com/GOVCERT-LU/emlparser/security/advisories/GHSA-389r-rccm-h3h5...

CVE-2018-19421

In GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML elements in a .eml file, because of admin/upload-uploadify.php, and validatesafefile in admin/inc/securityfunctions.php...

EUVD-2018-2569

Malware in sbrugna...

EUVD-2005-1286

Malware in sbrugna...

EUVD-2007-5978

Malware in sbrugna...

EUVD-2018-11113

Malware in sbrugna...

EUVD-2008-2851

Malware in sbrugna...

EUVD-2017-3791

Malware in sbrugna...

EUVD-2024-49969

Malicious code in bioql PyPI...

EUVD-2023-30776

Malicious code in bioql PyPI...

CVE-2023-26986

An issue in China Mobile OA Mailbox PC v2.9.23 allows remote attackers to execute arbitrary commands on a victim host via user interaction with a crafted EML file sent to their OA mailbox...

CVE-2007-6008

Heap-based buffer overflow in emlsr.dll before 2.0.0.4 in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK allows remote attackers to execute arbitrary code via a long Content-Type header line in an EML file. NOTE: the provenance of this information is unknown; the details are...

PT-2025-3934 · Code Projects · Admission Management System

Name of the Vulnerable Software and Affected Versions: code-projects Admission Management System version 1.0 Description: A critical issue was found in the Admission Management System. The problem affects an unknown functionality of the file /signupconfirm.php. The manipulation of the in eml...

openSUSE Security Advisory (SUSE-SU-2024:3629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-9481

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing...

CVE-2024-9481

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing...

CVE-2024-9481

CVE-2024-9481 describes an out-of-bounds write in the engine module of AVG/Avast Antivirus, for MacOS, affecting signatures prior to 24092400. A malformed EMl file can crash the application during file processing. Affected product/version scope: AVG/Avast Antivirus with signature