Xychix

2 exploits Active since Feb 2019

CVE-2016-1000282 WRITEUP CRITICAL WORKING POC

Haraka < 2.8.8 - OS Command Injection via Attachment Processing Plugin

Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.

CVSS 9.8

View Code

EIP-2026-103132 EXPLOITDB python WORKING POC

Haraka < 2.8.9 - Remote Command Execution

View Code