CVE-2024-21413

CVE-2024-21413 このPythonスクリプトは、CVE-2024-21413 を通称「MonikerLink」として悪用するためのものです。 TryHackMe ルーム: MonikerLink 前提条件...

HTB-Mailing-A-Complete-Walkthrough

HTB: Mailing — 完全なウォークスルー 作成者: Mursalin HackTheBoxのマシンに取り組んできたなら、Mailingは本当に何かを教えてくれるボックスの1つです。難易度はEasy、Windows上で動作し、ディレクトリトラバーサル、認証情報の漏洩、CVE-2024-21413、LibreOfficeのマクロエクスプロイトという、いくつかの現実世界の脆弱性が連鎖しています。ステップバイステップで見ていきましょう。 偵察 いつものように、nmapスキャンから始めて、何があるかを確認します。 nmap -p- --min-rate 10000 10.10.11.14...

CVE-2024-21413

CVE-2024-21413 このPythonスクリプトは、CVE-2024-21413 と名付けられた「MonikerLink」を悪用するために使用されます。 TryHackMe Room: MonikerLink 前提条件...

CVE-2026-100741

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

CVE-2026-100741

Progressive Robot Ltd's hMailServer (versions 6.0.0 through 6.3.3 on Windows) is vulnerable to Eval injection in the JScript event-script dispatcher. An unauthenticated remote attacker can execute arbitrary JScript within the hMailServer service process by sending a password containing a backslas...

CVE-2026-100741 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

CVE-2026-100741 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

EUVD-2026-87904

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

CVE-2026-100741 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

CVE-2026-100741: Improper Neutralization of Directives in Dynamically Evaluated Code

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

EUVD-2008-3662

Malware in sbrugna...

EUVD-2013-5411

Malware in sbrugna...

EUVD-2025-22112

Malicious code in bioql PyPI...

EUVD-2025-22113

Malicious code in bioql PyPI...

EUVD-2025-22115

Malicious code in bioql PyPI...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52374

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52372

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components. A local attacker can access sensitive information by reading these files to obtain an administrator password and running it...

Use of Hard-coded Cryptographic Key

Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key via the use of hardcoded cryptographic key in Encryption.cs. A local attacker can obtain decrypted credentials to other servers from hMailAdmin.exe.config file and access other hMailServer admin...