123 matches found
eximrce-CVE-2019-10149
eximrce सरल पायथन सॉकेट कनेक्शन यह जाँचने के लिए कि क्या exim CVE-2019-10149 के प्रति संवेदनशील है। पेलोड बस /root/lweximtest में एक फ़ाइल को touch करता है। सर्वर के उत्तर और पायथन के socket मॉड्यूल का सही उपयोग न करने के कारण आउटपुट धीमा होगा। इसे गति देने के तरीके पर एक सबक चाहिए। केवल cPanel...
CVE-2026-73570
CVE-2026-73570 CVE-2026-73570 PoC Mehr root@kitploit: echo 'EHLO mx-test.invalid MAIL FROM: RCPT TO: QUIT\r\n' | nc 127.0.0.1 587...
sendmail-clamav-exploit-CVE-2007-4560
Sendmail + ClamAV-Milter Exploit CVE-2007-4560 Python-RCE-Exploit für Sendmail mit ClamAV-Milter 0.91.2 CVE-2007-4560. Remote-Root-Befehlseinschleusung über SMTP-RCPT-TO-Header. Über Python-Port des klassischen Sendmail/ClamAV-Milter-Remote-Root-Exploits, ursprünglich in Perl von Eliteboy...
CVE-2020-7247-POC
Premessa Fatti chiave sullo sfruttamento Installazione del server vulnerabile Configurazione Disclaimer sull'ambiente Exploit Sfruttamento manuale Sfruttamento tramite script Premessa Questo repository dovrebbe servire come base per configurare e sfruttare CVE-2020-7247 in un ambiente controllato...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 has an improper restriction on write operations within the bounds of a memory buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands...
ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP
A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...
ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP
A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...
PT-2026-27441
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS version 8.8.15 Description A security issue exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows unauthenticated attackers to execute arbitrary system commands. This is possible due to...
CVE-2026-23829
CVE-2026-23829 — Mailpit SMTP header injection via regex bypass. Mailpit’s SMTP server (prior to v1.28.3) fails to properly filter control characters in RCPT TO/MAIL FROM addresses due to a regex with an incomplete character class, allowing CR/LF bypass and header injection. The flaw stems from G...
CVE-1999-0144
Denial of service in Qmail by specifying a large number of recipients with the RCPT command...
EUVD-2001-0260
Malware in sbrugna...
EUVD-2000-0958
Malware in sbrugna...
EUVD-1999-0144
Malware in sbrugna...
EUVD-2008-2777
Malware in sbrugna...
EUVD-2002-2059
Malware in sbrugna...
EUVD-2005-2388
Malware in sbrugna...
EUVD-2000-0972
Malware in sbrugna...
EUVD-1999-1513
Malware in sbrugna...
SideFX: Port 587 SMPT Open: Can send any mail remotely from the internal mail users to company mail id's.
Port 587 SMTP open. Attacker can send emails remotely to company email addresses. This allows phishing, spamming, or other malicious emails to be sent from what appears to be a legitimate internal company email account...
SUSE CVE-2003-0540
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service lock via 1 a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or 2 v...