PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dead.Letter (CVE-2026-45185) How XBOW Found an Unauthenticated RCE on Exim

xbow.com | vulnerability | Critical | CVE-2026-45185 | #rce | #vulnerability-research | #use-after-free | #exim | #cve-2026-45185 | #gnutls
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

XBOW recounts finding CVE-2026-45185, an unauthenticated Exim RCE: during GnuTLS TLS shutdown, a nested BDAT wrapper's ungetc() writes one byte into freed memory, corrupting allocator metadata.
CVE
CVE-2026-45185
CVSS
9.8
Published
Collected

Related coverage

vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
Critical · vulnerability · theori.io
Finding and Patching a CPython 0day in Hours: CVE-2026-6100
CVE-2026-6100 timeline: Xint Code flagged a critical CPython tarfile flaw within 30 minutes, and Python maintainers patched three compression modules the day after the report.
vulnerability · theori.io
Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394)
A deep dive into CVE-2024-27394, a TCP-AO use-after-free caused by incorrect RCU API usage in the Linux kernel, covering RCU internals, the patch, and the ExpRace technique for reliable triggering.
Back