CVE-2020-7247-POC

前言 关于该漏洞的关键事实 安装存在漏洞的服务器 配置 环境免责声明 漏洞利用 手动利用 脚本化利用 前言 本仓库旨在为在受控的私有环境中搭建并利用 CVE-2020-7247 提供基础。所有公开的代码和配置仅用于测试此漏洞，不得用于攻击不属于您自己或未经授权利用的系统。本仓库所有者不对第三方使用这些工具所造成的行为负责。 关于该漏洞的关键事实 代码中的主要问题在于邮件验证无法正常工作。它允许在 MAIL FROM 和 RCPT TO 字段中传递潜在危险的字符。...

sendmail-clamav-exploit-CVE-2007-4560

Sendmail + ClamAV-Milter 利用工具 CVE-2007-4560 Python RCE 利用工具，针对 Sendmail 搭配 ClamAV-Milter 0.91.2 CVE-2007-4560。通过 SMTP RCPT TO 标头实现远程 root 命令注入。 关于 经典 Sendmail/ClamAV-Milter 远程 root 利用工具的 Python 移植版，原始 Perl 版本由 Eliteboy 编写。 原始利用工具：exploit-db.com/exploits/4761 漏洞详情 该利用工具利用了 clamav-milter 0.91.2...

CVE-2026-73570

CVE-2026-73570 PoC - Probador de Inyección de Comandos SMTP Un script personalizado de prueba de concepto PoC en Python de bajo nivel para probar vulnerabilidades de inyección de comandos SMTP CVE-2026-73570. Esta herramienta envía una dirección RCPT TO malformada que contiene sustitución de...

CVE-2026-73570

CVE-2026-73570 PoC - Probador de Inyección de Comandos SMTP Un script personalizado de prueba de concepto PoC en Python de bajo nivel para probar vulnerabilidades de inyección de comandos SMTP CVE-2026-73570. Esta herramienta envía una dirección RCPT TO malformada que contiene sustitución de...

CVE-2026-73570

CVE-2026-73570 CVE-2026-73570 PoC Más root@kitploit: echo 'EHLO mx-test.invalid MAIL FROM: RCPT TO: QUIT\r\n' | nc 127.0.0.1 587...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 has an improper restriction on write operations within the bounds of a memory buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns...

PT-2026-27441

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS version 8.8.15 Description A security issue exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows unauthenticated attackers to execute arbitrary system commands. This is possible due to...

CVE-2026-23829

CVE-2026-23829 — Mailpit SMTP header injection via regex bypass. Mailpit’s SMTP server (prior to v1.28.3) fails to properly filter control characters in RCPT TO/MAIL FROM addresses due to a regex with an incomplete character class, allowing CR/LF bypass and header injection. The flaw stems from G...

EUVD-2000-0958

Malware in sbrugna...

EUVD-2001-0260

Malware in sbrugna...

EUVD-2005-2388

Malware in sbrugna...

EUVD-2002-2059

Malware in sbrugna...

EUVD-2000-0972

Malware in sbrugna...

EUVD-1999-1513

Malware in sbrugna...

SideFX: Port 587 SMPT Open: Can send any mail remotely from the internal mail users to company mail id's.

Port 587 SMTP open. Attacker can send emails remotely to company email addresses. This allows phishing, spamming, or other malicious emails to be sent from what appears to be a legitimate internal company email account...

SUSE CVE-2003-0540

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service lock via 1 a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or 2 v...