PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim MNEMO-CERT 开发了一个 PoC，可利用影响 Exim 多个版本（4.87 - 4.91）的漏洞 CVE-2019-10149，以提升权限执行命令。 要本地利用该漏洞，需要定义要执行的命令。对于远程场景，仅考虑了 Exim 未使用 ACL "verify= recipient" 的情况，此时除了命令外还需指定服务的 IP 地址和端口。 MNEMO-CERT 开发此 PoC 仅出于教育目的，并用于执行能够复现 CVE-2019-10149 所述漏洞的伦理测试。此 PoC 应仅在受控环境或获得必要授权的情况下使用。...

CVE-2019-10149

CVE-2019-10149 CVE-2019-10149 : Se encontró una falla en Exim versiones 4.87 a 4.91 inclusive. La validación incorrecta de la dirección del destinatario en la función delivermessage en /src/deliver.c puede conducir a la ejecución remota de comandos. Ejemplo nc -lvp 9000 python...

EUVD-2026-78403

fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization...

Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS

Submission metadata | Field | Value | |---|---| | Ecosystem | npm | | Package | nodemailer | | Repository | https://github.com/nodemailer/nodemailer | | Tested commit | 40d52215aac65b811d7e131bc916f68605efd9d2 | | Current tested version | 10.0.1 | | Confirmed vulnerable versions | 2.7.2, 3.0.0,...

CVE-2026-84422

IBM Guardium Data Protection 12.2 is vulnerable to an OS Command Injection (CWE-78) within the CLI certificate SMIME recipient deletion functionality. This flaw allows an authenticated privileged CLI user to execute arbitrary commands with root privileges . IBM has released a fix for version 12.2...

EUVD-2026-89196

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges...

CVE-2026-84422: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges...

DEBIAN-CVE-2026-100702

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

CVE-2026-100702

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

Improper Validation of Specified Quantity in Input

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the addressparser module's handling of quoted local-part addresses. When an address of the form...

UBUNTU-CVE-2026-100702

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

CVE-2026-100702 Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arrays

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

EUVD-2026-87675

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

CVE-2026-100702 Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arrays

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

CVE-2026-100702

Versions of Nodemailer before 10.0.2 are vulnerable to a Denial of Service (DoS) due to a flaw in how the library flattens deeply nested arrays in email recipient fields like to , cc , and bcc . A remote attacker can provide a deeply nested JSON recipient array, triggering recursive Array.toStrin...

CVE-2026-100702: Uncontrolled Recursion

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

Linux Distros Unpatched Vulnerability : CVE-2026-100702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustio...

CVE-2026-84713

A flaw exists in the automation-controller notification subsystem of Red Hat Ansible Automation Platform 2.7 (and related container releases). While NotificationTemplate.notification_ configurations are protected, the recipient value is copied in clear text into the unprotected Notification.recip...

Encoding Error

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Encoding Error in the mailto parser process. An attacker can inject unauthorized recipients or manipulate the subject and body fields by crafting a URI with percent-encoded reserved fie...

CVE-2026-86818

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 and 4.1.4, the mailto parser compares each query field name to the reserved names to, subject, and body while the name is still...