cve-2022-41352-zimbra-rce

CVE-2022-41352 Zimbra Unauthenticated RCE CVE-2022-41352 is an arbitrary file write vulnerability in Zimbra mail servers due to the use of a vulnerable cpio version. CVE-2022-41352 NIST.gov CVE-2022-41352 Rapid7 Analysis AffectedZimbra versions: Zimbra 9.0.0.p27 Zimbra 8.8.15.p34 Refer to the pat...

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

CVE-2022-27925

Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925...

Tyr

Tyr Peer-to-peer email on the Yggdrasil network. English | Русский Screenshots | | | ---|---|---|--- | | | What is Tyr? Tyr runs a complete mail server o...

mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕 Want to support mailcow? Please consider a support contract with Servercow to support further development. We support you while you support us. : You can also get a SAL which is a one-time payment with no liabilities or returning fees. Or just spread the word: moo...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Create exim user and group sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Install dependencies sudo apt-get update sudo apt-get install -y make build-essential...

nmap-nse-vulnerability-scripts

NMAP vulnerability scanning scripts A collection of nmap vulnerability scanning scripts to aid afforable detection and remediation. Background These scripts use the Nmap Scripting Engine NSE to implement checks for various vulnerabilities. References: https://nmap.org/book/man-nse.html...

mailinabox

Mail-in-a-Box 作者 @JoshData 和贡献者。 Mail-in-a-Box 通过提供一台一键式、易于部署的 SMTP+全套服务服务器，帮助个人重新掌控自己的电子邮件：一个装在盒子里的邮件服务器。 请访问https://mailinabox.email 查看项目网站和设置指南！ 我们的目标是： 让部署优秀的邮件服务器变得简单。 促进互联网的去中心化、创新和隐私保护。 拥有自动化、可审计且幂等的配置。 不 打造一个完全不可入侵、NSA 也无法攻破的服务器。 不 做成一个可供高级用户自定义的东西。 此外，本项目还有一份行为准则，其优先级高于上述目标。加入我们的社区时，请先阅读...

CVE-2020-7247-POC

Foreword Key facts about the exploit Installing the vulnerable server Configuration Environment disclaimers Exploit Manual Exploitation Scripted Exploitation Foreword This repository should serve as a base to set up and exploit CVE-2020-7247 in a controlled and private environment. All of the...

CVE-2024-32399

CVE-2024-32399 Vulnerability Overview Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component Vulnerability Type Directory Traversal Vendor of Product RaidenMAILD Mail Server Affected...

RaidenMAILD Mail Server v.4.9.4 - Path Traversal

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component. id: CVE-2024-32399 info: name: RaidenMAILD Mail Server v.4.9.4 - Path Traversal author: DhiyaneshDK severity: high description: |...

IceWarp Mail Server v10.4.5 - Cross-Site Scripting

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter. id: CVE-2023-39700 info: name: IceWarp Mail Server v10.4.5 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | IceWarp Mail Server v10.4.5 was...

CVE-2024-28589

CVE-2024-28589 Windows용 Axigen Mail Server에서 모든 버전 10.5.18까지 영향을 주는 취약점이 발견되었으며, 이는 로컬 권한 상승을 허용합니다. 설명: Axigen Mail Server는 world-writable 디렉토리에서 안전하지 않은 DLL 로딩으로 인해 로컬 권한 상승에 취약한 것으로 밝혀졌습니다. SYSTEM 권한으로 실행되는 "Axigen Mail Server" 서비스 시작 시, 존재하지 않는 디렉토리를 검색합니다. 로컬 접근 권한이 있는 공격자는 이 디렉토리를 생성하고 악성 D...

asf__james-project_CVE-2022-22931_3-6-0

Apache James プロジェクト :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgチャットに参加...

CVE-2003-0264

🐞 CVE-2003-0264: SLMail 5.5 - Stack-Based Buffer Overflow Classic stack-based buffer overflow in SLMail 5.5 showing how early mail servers could be compromised through oversized SMTP and POP3 commands. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context an...

CVE-2025-26794-exploit

CVE-2025-26794: Exim ETRN SQL Injection Exploit A proof-of-concept exploit tool for CVE-2025-26794, demonstrating SQL injection vulnerability in Exim 4.98 mail server via the ETRN command when using SQLite DBM storage. ⚠️ Legal Disclaimer FOR AUTHORIZED SECURITY TESTING ONLY This tool is provided...

The vulnerability of the dn_expand() function in the Exim mail server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the dnexpand function in the Exim mail server is related to errors in the representation of certain functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2020-28018

POC CVE-2020-28018 Introduction The Qualys team has discovered and published 21 critical vulnerabilities in the Exim4 mail server. https://blog.qualys.com/vulnerabilities-research/2021/05/04/21nails-multiple-vulnerabilities-in-exim-mail-server The following link provides detailed technical...

CVE-2026-33263

A flaw was found in the Dovecot mail server's submission-login component. This vulnerability occurs when the server reaches its maximum allowed user IP connections, leading to a crash due to file descriptor handling issues. This can result in a denial of service, preventing users from sending...

Linux Distros Unpatched Vulnerability : CVE-2026-40014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message...