{"vulnerability": "CVE-2016-1000282", "sightings": [{"uuid": "6a39142a-ea23-4b46-9362-c77d67fe2f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-1000282", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/haraka.py", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "21b42ce2-a642-40c5-8c1f-15b1834199ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-1000282", "type": "seen", "source": "https://t.me/cibsecurity/2401", "content": "ATENTION\u203c New - CVE-2016-1000282\n\nHaraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-02-05T20:22:28.000000Z"}, {"uuid": "1e47c939-f725-4fc8-a1f3-c2a6ffb00156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-1000282", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/haraka.py", "content": "{\"aliases\": [], \"arch\": \"x64, x86\", \"author\": [\"xychix \", \"smfreegard\", \"Adam Cammack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"The Haraka SMTP server comes with a plugin for processing attachments.\\n        Versions before 2.8.9 can be vulnerable to command injection\", \"disclosure_date\": \"2017-01-26\", \"fullname\": \"exploit/linux/smtp/haraka\", \"is_install_path\": true, \"mod_time\": \"2025-04-23 17:11:37 +0000\", \"name\": \"Haraka SMTP Command Injection\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"Harakiri\"]}, \"path\": \"/modules/exploits/linux/smtp/haraka.py\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/smtp/haraka\", \"references\": [\"CVE-2016-1000282\", \"EDB-41162\", \"URL-https://github.com/haraka/Haraka/pull/1606\"], \"rport\": 25, \"session_types\": false, \"targets\": [\"linux x64\", \"linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:23.039622Z"}]}