PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)

depthfirst.com | vulnerability | Medium | CVE-2025-59419 | #vulnerability-research | #java | #command-injection | #netty | #smtp | #cve-2025-59419
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Netty's SMTP codec allowed CRLF injection in user input, letting attackers append forged mail commands that bypass SPF, DKIM and DMARC; depthfirst's agent found it, tracked as CVE-2025-59419.
CVE
CVE-2025-59419
CVSS
5.5
Published
Collected

Related coverage

vulnerability · swarm.ptsecurity.com
Hunting for bugs in VMware: View Planner and vRealize Business for Cloud
PT SWARM uncovers unauthenticated RCEs in VMware View Planner (CVE-2021-21978) and vRealize Business for Cloud (CVE-2021-21984). The View Planner flaw traces to an unauthenticated WSGI log-upload endpoint in its dockerized web stack, leading to command execution.
vulnerability · bishopfox.com
SolarWinds Log & Event Manager - Arbitrary Command Injection
Advisory for an arbitrary command injection in SolarWinds Log & Event Manager (CVE-2017-7647): an authenticated user could escape the CMC console and run commands as root; fixed in 6.3.1 HF4.
vulnerability · yeswehack.com
Dojo challenge #30 winners!
Winners and best writeups of Dojo challenge #30, 'Terminal Isolation': players chained a command injection flaw into remote code execution; top reports by aendxr, pwnwithlove and truff.
vulnerability · slcyber.io
High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)
The research team releases an open source tool php2shell-scanner which contains a high fidelity scanning mechanism to check for CVE-2026-109618 and CVE-2026-109619 across hosts.
High · vulnerability · github.com
simple-git Command Injection to Remote Code Execution PoC (CVE-2026-6951)
simple-git is downloaded tens of millions of times monthly across CI/CD and developer tools; services exposing Git clone/import features to untrusted input face direct server compromise.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
Back