7 matches found
CVE-2026-114474
Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at tha...
EUVD-2026-107317
Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at tha...
PT-2026-120652
Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write in the name of a domain the server hosts sent on by the server with an envelope sender at tha...
CVE-2026-53533 aiosmtplib: SMTP command injection via CR/LF in sender/recipient address
aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...
Exploit for Argument Injection in Phpmailer_Project Phpmailer
PHPMailer And that's it, you have your shell. There is another exploit, which ilustrates another use case. ./deface.sh localhost:8080 + CVE-2016-10033 exploit by opsxcq + Exploiting localhost:8080 + Target exploited, acessing shell at http://localhost:8080/backdoor.php + Checking if the backdoor...
CVE-2011-0919
Multiple stack-based buffer overflows in the 1 POP3 and 2 IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ...
Stack overflow
Multiple stack-based buffer overflows in the 1 POP3 and 2 IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ...