CVE-2024-21413

CVE-2024-21413 Este script de Python se utiliza para explotar la CVE-2024-21413 acuñada "MonikerLink" Sala de TryHackMe: MonikerLink Supuestos Este PoC ha sido creado para un entorno de laboratorio, lo que significa que el servidor debe configurarse de una manera específica es decir, la...

CVE-2024-21413

CVE-2024-21413 このPythonスクリプトは、CVE-2024-21413 と名付けられた「MonikerLink」を悪用するために使用されます。 TryHackMe Room: MonikerLink 前提条件...

HTB-Mailing-A-Complete-Walkthrough

HTB: Mailing —— 完整通关指南 作者：Mursalin 如果你一直在刷 HackTheBox 靶机，Mailing 就是那种真正能让你学到东西的机器之一。它被评为 Easy 难度，运行在 Windows 上，并且串联了几个真实世界的漏洞——目录遍历、凭据泄露、CVE-2024-21413，以及一个 LibreOffice 宏利用漏洞。让我们一步一步地过一遍。 信息收集 像往常一样，我们先用 nmap 扫描来了解我们要面对的东西： root@kitploit: nmap -p- --min-rate 10000 10.10.11.14 nmap -p ports -sCV...

EUVD-2008-3662

Malware in sbrugna...

EUVD-2013-5411

Malware in sbrugna...

EUVD-2025-22113

Malicious code in bioql PyPI...

EUVD-2025-22112

Malicious code in bioql PyPI...

EUVD-2025-22115

Malicious code in bioql PyPI...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52374

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52372

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components. A local attacker can access sensitive information by reading these files to obtain an administrator password and running it...

Use of Hard-coded Cryptographic Key

Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key via the use of hardcoded cryptographic key in Encryption.cs. A local attacker can obtain decrypted credentials to other servers from hMailAdmin.exe.config file and access other hMailServer admin...

CVE-2025-52374

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52372

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52372

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

PT-2025-30302 · Unknown · Hmailserver

Name of the Vulnerable Software and Affected Versions: hMailServer versions 5.6.9-beta through 5.8.6 Description: The software uses a hardcoded cryptographic key in the Encryption.cs file. This allows an attacker to decrypt passwords for other servers stored in the hMailAdmin.exe.config file,...