Search: “nodemailer”

4 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 3 Exploit / PoC 1

SeverityAll critical 0 high 0 medium 4 low 0 info 0

[webapps] Nodemailer 9.0.0 - File Read/ SSRF

A public proof-of-concept demonstrates arbitrary file read and SSRF in Nodemailer 9.0.0.

Exploit-DB entry 52654 contains a webapps proof-of-concept for Nodemailer 9.0.0 demonstrating both arbitrary file read and server-side request forgery. Nodemailer is a widely used Node.js email-sending library, so affected deployments could expose local files or internal services. The listing does not include a CVE identifier or evidence of in-the-wild exploitation.

Exploit-DBAug 18, 00:00 UTC · 28d agoExploit / PoC

35

Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets

The Hacker NewsSep 2, 04:40 UTC · Sep 2, 2025Malware

30

Malicious npm Package Masquerades as Popular Email Library

Infosecurity MagazineSep 2, 16:45 UTC · Sep 2, 2025Malware

30

Malicious npm and PyPI target Solana Private keys to steal funds from victims' wallets

Security AffairsJan 20, 12:32 UTC · Jan 20, 2025Malware

30