Crashmail vulnerabilities

CVEs whose affected-version data names the Crashmail package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2018-25223Critical· 9.8PoC

6mo ago

Crashmail 1.6 Stack-based Buffer Overflow Remote Code Execution

Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code executi…

▾ Abyssalcrashmail · CrashmailEPSS 0.88%via CVEORG