CVE-2025-25198-PoC

CVE-2025-25198-PoC CVE-2025-25198에 대한 개념 증명PoC으로, Mailcow 비밀번호 재설정 흐름에 영향을 미치는 Host 헤더 중독 문제입니다. 이 스크립트는 로컬 HTTPS 리스너를 포트 443에서 시작하고, 유효한 CSRF 토큰을 자동으로 획득하며, 중독된 Host 헤더로 비밀번호 재설정 시퀀스를 전송한 후 HTTP 응답 또는 리스너로의 콜백을 통해 재설정 링크가 복구되면 중단됩니다. 기능 1. 자체 서명된 인증서로 HTTPS 리스너를 시작합니다. 2. 새 HTTP 클라이언트 세션을 생성합니다...

mailcow-dockerized

mailcow: докеризованный — 🐮 + 🐋 = 💕 Хотите поддержать mailcow? Пожалуйста, рассмотрите контракт на поддержку с Servercow, чтобы поддержать дальнейшее развитие. Мы поддерживаем вас , пока вы поддерживаете нас. : Вы также можете приобрести SAL — это единоразовый платеж без обязательств и повторных...

Mailcow < 2026-03b - Href Link Injection

mailcow 2026-03b reflects raw REQUESTURI into JavaScript and href links on the login page, allowing attackers to inject parameters that break JS logic and enable phishing. id: CVE-2026-40878 info: name: Mailcow 2026-03b - Href Link Injection author: ritikchaddha severity: low description: | mailc...

Mailcow Dockerized Swagger UI - Cross-Site Scripting

Mailcow-dockerized before 2022-09a uses a vulnerable version of Swagger UI before 4.11.1 that is affected by a DOM-based Cross-Site Scripting XSS vulnerability. When a user accesses the Swagger documentation with a crafted configUrl or url parameter containing JavaScript payloads, arbitrary code...

CVE-2024-41958-PoC

CVE-2024-41958-PoC Это небольшая концептуальная демонстрация для CVE-2024-41958. Возможен обход аутентификации TFA в панели администратора. Затронутые версии: 2024-07 Необходимые предварительные условия для работы CVE: Пароль и имя пользователя для учетной записи без TFA. Пароль и имя пользовател...

Mailcow-CVE-2022-31138

Mailcow CVE-2022-31138 RCE и повышение привилегий до Domain Admin для Mailcow. POC для CVE-2022-31245 может быть изменен для работы с этой уязвимостью. Сообщено и исправлено: 2022-06 Code Injection, RCE Тип: Code Injection CWE-94, RCE, Domain Takeover Затронутые версии: начиная с 2019 по 2022-06a...

CVE-2024-24760

CVE-2024-24760 mailcow: Уязвимость Docker-контейнера, открывающая доступ к локальной сети...

CVE-2025-25198

CVE-2024-25198 mailcow: dockerized는 docker 기반의 오픈 소스 그룹웨어/이메일 제품군입니다. 2025-01a 버전 이전에는 mailcow의 비밀번호 재설정 기능의 취약점으로 인해 공격자가 Host HTTP 헤더를 조작하여 공격자가 제어하는 도메인을 가리키는 비밀번호 재설정 링크를 생성할 수 있습니다. 사용자가 이 오염된 링크를 클릭하면 계정 탈취로 이어질 수 있습니다. 작동 방식? 모든 요청을 수신하는 https 서버를 설정하고 선택한 가 포함된 Host 헤더와 함께 웹사이트에 POST 요청을...

Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245: Mailcow를 위한 RCE 및 도메인 관리자 권한 상승. POC 포함. 보고 및 수정: 2022-05 패치된 버전: https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE: https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245: 명령 주입, RCE 심각도: 3/3 유형: 명령 주입, RCE, 도메인 탈취 영향을 받는 버전: 최소 2019 -...

CVE-2024-30270-PoC

Этот скрипт предназначен для эксплуатации уязвимостей в экземпляре Mailcow с помощью межсайтового скриптинга XSS и удаленного выполнения кода RCE. Скрипт нацелен на выполнение следующих действий: Внедрение XSS-полезной нагрузки payload в веб-интерфейс Mailcow. Использование XSS-полезной нагрузки...

mailcow-dockerized v2026-09

mailcow: dockerized - 🐮 + 🐋 = 💕 Want to support mailcow? Please consider a support contract with Servercow to support further development. We support you while you support us. : You can also get a SAL which is a one-time payment with no liabilities or returning fees. Or just spread the word: moo...

CVE-2026-40874

mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, no administrator verification takes place when deleting Forwarding Hosts with /api/v1/delete/fwdhost. Any authenticated user can call this API. Checks are only applied for edit/add actions,...

CVE-2026-7460

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...

CVE-2026-40871

mailcow: dockerized is an open source groupware/email suite based on docker. Versions prior to 2026-03b have a second-order SQL injection vulnerability in the quarantinecategory field via the Mailcow API. The /api/v1/add/mailbox endpoint stores quarantinecategory without validation or sanitizatio...

CVE-2026-40875

mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the user dashboard's "Seen successful connections" login history renders the client IP from login logs without HTML escaping. Because the server trusts the X-Real-IP header as the source IP...

CVE-2026-7460

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...

CVE-2026-7460

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...

CVE-2026-7460

CVE-2026-7460 affects mailcow-dockerized (2026-03b) and describes a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and render...

CVE-2026-7460 mailcow-dockerized 2026-03b - Stored XSS in Queue Manager via unescaped

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...

EUVD-2026-31048

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML...