58 matches found
nmap-nse-vulnerability-scripts
NMAP 脆弱性スキャンスクリプト 手頃な価格での検出と修復を支援するための nmap 脆弱性スキャンスクリプト集です。 背景 これらのスクリプトは、Nmap Scripting Engine NSE を使用してさまざまな脆弱性のチェックを実装しています。 参照: https://nmap.org/book/man-nse.html https://nmap.org/nsedoc/index.html スクリプト Exim メールサーバー CVE-2020-28017 から CVE-2020-28026 別名 21Nails スクリプト:...
The vulnerability of the Exim mail server, related to errors in representing specified functions, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Exim mail server is related to errors in representing certain functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the dn_expand() function in the Exim mail server allows a hacker to gain unauthorized access to protected information.
The vulnerability of the dnexpand function in the Exim mail server is related to errors in the representation of certain functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the PROXY protocol parser of the Exim mail server allows a hacker to cause a service failure.
The vulnerability of the PROXY protocol parser of the Exim mail server is related to the lack of checks for verifying that the value is within the minimum range. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260729-73-0012
The vulnerability of the Exim mail server is related to the lack of initialization of resources. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...
ROS-20260729-73-0014
The vulnerability of the Exim mail server is related to reading data from buffer beyond the allowed limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
The vulnerability of the Exim mail server, related to reading data beyond the allowed buffer limits, allows attackers to gain access to confidential data.
The vulnerability of the Exim mail server is related to reading data from buffer beyond the allowed limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
The vulnerability of the Exim mail server, related to the lack of initialization of resources, allows attackers to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the Exim mail server is related to the lack of initialization of resources. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...
CVE-2026-48840
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client...
The vulnerability of the ungetc() function in the BDAT/CHUNKING component of the email server Exim, which allows a hacker to execute arbitrary code.
The vulnerability of the ungetc function in the BDAT/CHUNKING component of the email server Exim relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-40684
A flaw was found in Exim, specifically on systems utilizing musl libc. A remote attacker can exploit this vulnerability by providing malformed DNS data within PTR records. This can lead to the mail transfer agent MTA connection instance crashing, resulting in a Denial of Service DoS for affected...
CVE-2026-40684
In Exim before 4.99.2, on systems using musl libc (not glibc), a vulnerability can crash the connection instance when malformed DNS PTR data is present. The issue arises from a dn_expand octal printing oddity in the handling of PTR records, as described in multiple sources. Affected software/comp...
ROS-20260310-73-0017
An Exim mail server vulnerability is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
📄 Qualys Security Advisory - Exim 21Nails Advisory
Qualys audited central parts of the Exim mail server and discovered 21 vulnerabilities, with 11 being local vulnerabilities and 10 being remote vulnerabilities. This is older research from 2021 that was missing from the archive. Qualys Security Advisory 21Nails: Multiple vulnerabilities in Exim...
The vulnerability of the Exim mail server, related to the use of memory after it is freed, allows attackers to increase their privileges.
The vulnerability of the Exim mail server is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20250417-07
Exim mail server vulnerability is related to memory usage after memory is freed. Exploitation of the vulnerability could allow an attacker to escalate his privileges...
ROS-20250403-03
Vulnerability of SQLite hints and ETRN serialization functions of Exim mail server is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sendi...
SUSE CVE-2025-30232
A use-after-free in Exim 4.96 through 4.98.1 could allow users with command-line access to escalate privileges...
Vulnerabilities include SQLite hint functions and ETRN serialization of the Exim mail server, which allows attackers to cause service interruptions.
The vulnerabilities of SQLite’s hints and Exim mail server’s ETRN serialization are related to the lack of measures taken to protect the SQL query structure. Exploiting these vulnerabilities can allow a malicious actor to cause service failures by sending specially crafted SQL queries...
DEBIAN-CVE-2025-26794
Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...