CVE-2016-10033

CVE-2016-10033 – PHPMailer Remote-Code-Ausführung 📌 Beschreibung Dieses Repository enthält einen Proof-of-Concept PoC Exploit für CVE-2016-10033 , eine Schwachstelle in PHPMailer -Versionen vor 5.2.18. Das Problem tritt auf, wenn das Argument $additionalparameters der eingebauten PHP-Funktion mai...

aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

Summaryaiosmtplib's SMTP.mail, SMTP.rcpt, SMTP.vrfy and SMTP.expn send the caller-supplied email address to the server without rejecting embedded CR/LF \r\n bytes. An address that contains a CR/LF is written verbatim onto the SMTP control connection, so the bytes after the CRLF are framed by the...