CVE-2024-39929

CVE-2024-39929 प्रमाण-अवधारणा भेद्यता संक्षिप्त विवरण Exim 4.97.1 तक के संस्करण मल्टीलाइन RFC 2231 हेडर फ़ाइलनाम का गलत विश्लेषण करते हैं, और इस प्रकार दूरस्थ हमलावर $mimefilename एक्सटेंशन-ब्लॉकिंग सुरक्षा तंत्र को बायपास कर सकते हैं, और संभावित रूप से अंतिम उपयोगकर्ताओं के मेलबॉक्स में निष्पादन...

CVE-2024-39929

Exim CVE-2024-39929 Exploit PoC इस रिपॉज़िटरी में Exim भेद्यता CVE-2024-39929 का शोषण करने के लिए एक Proof-of-Concept PoC स्क्रिप्ट शामिल है। यह भेद्यता Exim के 4.98 से पहले के संस्करणों को प्रभावित करती है, जिससे हमलावर फ़ाइल एक्सटेंशन ब्लॉकिंग तंत्र को बायपास कर सकते हैं और संभावित रूप से...

CVE-2020-10212

upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename is added to the...

Exploit for Improper Encoding or Escaping of Output in Exim

CVE-2024-39929 PoC Vulnerability Brief Exim through 4.97...

Critical Exim Mail Server Vulnerability Exposes Millions to Malicious Attachments

A critical security issue has been disclosed in the Exim mail transfer agent that could enable threat actors to deliver malicious attachments to target users' inboxes. The vulnerability, tracked as CVE-2024-39929, has a CVSS score of 9.1 out of 10.0. It has been addressed in version 4.98. "Exim...

DEBIAN-CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

UBUNTU-CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

CVE-2024-39929

Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users...

CVE-2020-10212

upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename is added to the...

CVE-2020-10212

CVE-2020-10212 concerns Responsive FileManager. The vulnerability is an SSRF in upload.php via the url parameter, affecting 9.13.4 and 9.14.0, with the issue rooted in how file-extension blocking is handled and DNS hostnames resolving to internal IPs; this is noted as a consequence of an incomple...

CVE-2020-10212

upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename is added to the...