Sploitus

CVE-2019-10149

44 known exploits for CVE-2019-10149

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

Affected products
Exim, Suse, Ubuntu
Exim
≤ 4.91
Fix
Available
CVSS 2.0
10.0 HIGH
CVSS 3.1
9.8 CRITICAL
EPSS
100.0% (100th percentile)
Weakness
CWE-78
NVD status
Analyzed
Published
2019-06-05
CVE-2019-10149 at NVD
Authoritative description, scoring and affected products

44 known exploits for CVE-2019-10149

Proof-of-concept code and exploit modules indexed by Sploitus

exploits
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149-quick
2026-08-26 KitPloitKITPLOIT
EXIM-4.87-CVE-2019-10149
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149
2026-08-26 KitPloitKITPLOIT
PoC_CVE-2019-10149--rce
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149-Exploit
2026-08-26 KitPloitKITPLOIT
PoC--CVE-2019-10149_Exim
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149-privilege-escalation
2026-08-26 KitPloitKITPLOIT
exim-cve-2019-10149-data
2026-08-26 KitPloitKITPLOIT
exploits
2026-08-26 KitPloitKITPLOIT
CVE-2019-10149
2026-08-25 KitPloitKITPLOIT
CVE-2019-10149-Exim4-RCE
2026-08-25 KitPloitKITPLOIT
eximrce-CVE-2019-10149
2026-08-25 KitPloitKITPLOIT
Exim-CVE-2019-10149
2026-08-24 KitPloitKITPLOIT
exploits
2026-05-25 HexCore8GITHUB
📄 Exim 4.91 Remote Command Execution
2026-05-08 Ambrella SecurityPACKETSTORMPython
Exploit for OS Command Injection in Exim
2026-05-07 Ambrella-SecurityGITHUB
📄 Qualys Security Advisory - Exim 21Nails Advisory
2026-02-11 Qualys Security AdvisoryPACKETSTORMPerl
Exploit for OS Command Injection in Exim
2026-01-21 CybersRMUTLGITHUB
📄 Exim Vulnerability Scanner
2025-12-10 indoushkaPACKETSTORMPHP
Exploit for OS Command Injection in Exim
2020-06-03 area1GITHUB
Exploit for OS Command Injection in Exim
2020-06-03 cloudflareGITHUB
Exploit for OS Command Injection in Exim
2019-10-27 DiefunctionGITHUB
Exploit for OS Command Injection in Exim
2019-10-21 darsigovrustamGITHUB
Exim 4.87 / 4.91 - Local Privilege Escalation (Metasploit)
2019-08-26 MetasploitEXPLOITDBRuby
Exim 4.87 / 4.91 - Local Privilege Escalation Exploit
2019-08-23 zdtZDTRuby
Exim 4.91 Local Privilege Escalation
2019-08-23 Marco IvaldiPACKETSTORMRuby
Exploit for OS Command Injection in Exim
2019-07-25 Brets0150GITHUB
Exploit for OS Command Injection in Exim
2019-06-27 AzizMeaGITHUB
Exim 4.91 Local Privilege Escalation Exploit
2019-06-17 Marco IvaldiZDTBash
Exim 4.87 - 4.91 - Local Privilege Escalation
2019-06-17 Marco IvaldiEXPLOITPACKBash
Exim 4.87 - 4.91 - Local Privilege Escalation
2019-06-17 Marco IvaldiEXPLOITDBBash
Exim 4.91 Local Privilege Escalation
2019-06-17 Marco IvaldiPACKETSTORM
Exploit for OS Command Injection in Exim
2019-06-13 MNEMO-CERTGITHUB
Exploit for OS Command Injection in Exim
2019-06-12 cowbe0x004GITHUB
Exim 4.87 < 4.91 - (Local / Remote) Command Execution Exploit
2019-06-07 Qualys CorporationZDT
Exim 4.87 - 4.91 Local Privilege Escalation
2019-06-05 Qualys, Dennis Herrmann, Marco Ivaldi, Guillaume AndréMETASPLOITRuby
Immunity Canvas: EXIM_EXPANSION_RCE
2019-06-05 Immunity CanvasCANVAS
Exim 4.87 4.91 - (Local Remote) Command Execution
2019-06-05 Qualys CorporationEXPLOITPACK
Exim 4.87 < 4.91 - (Local / Remote) Command Execution
2019-06-05 Qualys CorporationEXPLOITDB