1652 matches found
CVE-2021-38817-Remote-OS-Command-Injection
CVE-2021-38817-リモートOSコマンドインジェクション TastyIgniter v3.0.7 Sendmail Webパートにおける認証済みリモートOSコマンドインジェクション/リモートコード実行 CVE-2021-38817 TastyIgniter v3.0.7 レストランCMS WebアプリケーションのSendmail設定メニューには、認証済みリモートOSコマンドインジェクションの脆弱性が存在します。Sendmail Pathパラメータは適切にサニタイズされておらず、フィールドに入力されている /usr/sbin/sendmail -bs...
CVE-2016-10033
CVE-2016-10033 – PHPMailer 원격 코드 실행 📌 설명 이 저장소는 CVE-2016-10033 에 대한 개념 증명PoC 익스플로잇 코드를 포함하고 있습니다. 이는 PHPMailer 버전 5.2.18 미만 에서 발생하는 취약점입니다. 문제는 PHP 내장 mail 함수의 $additionalparameters 인수가 부적절하게 처리될 때 발생하며, 공격자가 sendmail 에 추가 명령줄 매개변수를 주입할 수 있게 됩니다. 이를 악용하여 웹 접근 가능 디렉토리에 임의의 PHP 코드를 작성할 수 있으며, 원격 코드...
CVE-2020-27976
CVE-2020-27976 익스플로잇 osCommerce Phoenix CE 대신 여러 줄 주석 / 으로 끝내는 것이 좋습니다. 이 방법이 테스트 중에 가장 좋은 결과를 제공했습니다. 페이로드의 줄 바꿈은 업로드 전에 공백으로 대체됩니다. ================== 출처: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/...
ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution
ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution CVE-2007-4560에 대한 익스플로잇 ClamAV Milter Sendmail 0.91.2 원격 코드 실행 이 익스플로잇은 교육 목적으로만 제공되며 악의적인 목적으로 사용해서는 안 됩니다...
exploit-CVE-2016-9920
Roundcube 1.0.0 Roundcube 1.2.2 以前では、ユーザー制御の入力がサニタイズされずに、セキュリティ上重要とされている PHP の組み込み関数 mail への呼び出しの第5引数に渡されます。問題は、mail 関数を呼び出すと PHP が sendmail プログラムを実行することです。第5引数はこの実行に追加パラメータを渡すことを可能にし、sendmail の設定を可能にします。sendmail にはすべてのメールトラフィックをファイルに記録する -X オプションがあるため、攻撃者はこのオプションを悪用して、攻撃対象サーバーのウェブルートデ...
sendmail-clamav-exploit-CVE-2007-4560
Sendmail + ClamAV-Milter エクスプロイト CVE-2007-4560 Sendmail と ClamAV-Milter 0.91.2 CVE-2007-4560 向け Python RCE エクスプロイト。SMTP RCPT TO ヘッダーを介したリモート root コマンドインジェクション。 概要 Eliteboy によって Perl で書かれた古典的な Sendmail/ClamAV-Milter リモート root エクスプロイトの Python 移植。 オリジナルエクスプロイト: exploit-db.com/exploits/4761 脆弱性...
Astra Linux – Vulnerability in sendmail
Sendmail in version 8.17.2 allows for SMTP smuggling in certain configurations. Remote attackers can utilize a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, thereby bypassing an SPF protection mechanism. This issue arises because Sendmail supports...
MAL-2026-10847 Malicious code in @gocortexio/npmgremlinbox-sendmail-8-23 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 112e0a80917ce922de20557d22ea75375b07d627784966638b99e1d4ad46a355 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Remote Code Execution
YouTransfer is vulnerable to Remote Code Execution. The vulnerability is due to an issue in the sendmail transport integration component, where attackers can execute arbitrary code via supplying a crafted request...
CVE-2026-45068
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...
aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address
Summaryaiosmtplib's SMTP.mail, SMTP.rcpt, SMTP.vrfy and SMTP.expn send the caller-supplied email address to the server without rejecting embedded CR/LF \r\n bytes. An address that contains a CR/LF is written verbatim onto the SMTP control connection, so the bytes after the CRLF are framed by the...
PT-2026-59022
Summary aiosmtplib's SMTP.mail, SMTP.rcpt, SMTP.vrfy and SMTP.expn send the caller-supplied email address to the server without rejecting embedded CR/LF r bytes. An address that contains a CR/LF is written verbatim onto the SMTP control connection, so the bytes after the CRLF are framed by the...
CVE-2026-59721
Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the updateInfraConfigs GraphQL mutation in admin/infra.resolver.ts accepts an attacker-controlled MAILERSMTPURL value, and validateSMTPUrl in utils.ts permits path, query, or fragment content that nodemailer parses into...
CVE-2026-59721
Hoppscotch (open source API development ecosystem) contains a Rooted Command Execution risk before version 2026.6.0 due to the updateInfraConfigs GraphQL mutation in admin/infra.resolver.ts accepting an attacker-controlled MAILER_SMTP_URL. The validateSMTPUrl in utils.ts permits path, query, or f...
aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address
Summary aiosmtplib's SMTP.mail, SMTP.rcpt, SMTP.vrfy and SMTP.expn send the caller-supplied email address to the server without rejecting embedded CR/LF \r\n bytes. An address that contains a CR/LF is written verbatim onto the SMTP control connection, so the bytes after the CRLF are framed by the...
YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...
EUVD-2026-36778
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...
GHSA-68MC-H6H8-79WJ YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...
Arbitrary Code Injection
Overview youtransfer is a self-hosted file transfer solution. Affected versions of this package are vulnerable to Arbitrary Code Injection through the sendmail transport integration component. An attacker can execute arbitrary code by supplying a specially crafted request. Remediation There is no...