CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - POC de script Expect envía un correo electrónico legítimo, pero dentro del correo hay muchos otros correos diferentes remitentes, destinatarios, asunto, etc.. El correo inicial se verifica con SPF/DKIM/DMARC, ¡los demás que están dentro no! uso:...

WhoAmIMailBot

¿Quién Soy Mail Bot? ¿Qué es? ¿Quién Soy Mail Bot? es un servicio para enmascarar tus correos electrónicos. Está inspirado en Blur, donde puedes crear un alias para tu correo y usarlo para registrarte en aplicaciones. El problema de Blur es que todos los correos pasan por su infraestructura y yo ...

mailinabox

Mail-in-a-Box 作者 @JoshData 和贡献者。 Mail-in-a-Box 通过提供一台一键式、易于部署的 SMTP+全套服务服务器，帮助个人重新掌控自己的电子邮件：一个装在盒子里的邮件服务器。 请访问https://mailinabox.email 查看项目网站和设置指南！ 我们的目标是： 让部署优秀的邮件服务器变得简单。 促进互联网的去中心化、创新和隐私保护。 拥有自动化、可审计且幂等的配置。 不 打造一个完全不可入侵、NSA 也无法攻破的服务器。 不 做成一个可供高级用户自定义的东西。 此外，本项目还有一份行为准则，其优先级高于上述目标。加入我们的社区时，请先阅读...

CVE-2023-51764

PoC for CVE-2023-51764 SMTP SMUGGLING Postfix CVE-2023-5176525.py Description This script allows sending messages using port 25 of the mail server. Usage Before running, modify the variables: smtpserver - address of the mail server fromaddress - sender of the first email toaddress - recipient of...

flyphish

Flyphish Flyphish es un playbook de Ansible que permite a consultores de ciberseguridad desplegar un servidor de phishing en la nube para evaluaciones de seguridad. El playbook instala y configura Gophish , Postfix y OpenDKIM en una máquina virtual en la nube. Además, con fines de OPSEC, el...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6.0.6)

The version of AOS installed on the remote host is prior to 7.6.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.6.0.6 advisory. - In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Webmin Help Template Authenticated Remote Code Execution

Webmin's help system accepts template variables via query parameters and processes them through the eval function. This allows an authenticated user to execute commands with root privileges. Versions prior to 2.640 appear to be affected. Webmin Help Template Authenticated Remote Code Execution...

RHSA-2026:51436 Red Hat Security Advisory: postfix security update

Bulletin has no description...

RHSA-2026:51034 Red Hat Security Advisory: postfix security update

Bulletin has no description...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

RHSA-2026:50963 Red Hat Security Advisory: postfix security update

Bulletin has no description...

RHSA-2026:50964 Red Hat Security Advisory: postfix security update

Bulletin has no description...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...