CVE-2024-32399

CVE-2024-32399 Vulnerability Overview Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component Vulnerability Type Directory Traversal Vendor of Product RaidenMAILD Mail Server Affected...

CVE-2022-4556

CVE-2022-4556 - Stored XSS in SOGo Webmail v5.7.1 🧠 Summary A Stored Cross-Site Scripting XSS vulnerability was discovered in the fullName field of the Identity Preferences section in the SOGo web interface , affecting version 5.7.1. An authenticated attacker could inject a malicious script that...

CVE-2016-010033-010045

CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...

ShellPop

ShellPop About Shellpop is all about popping shells. With this tool you can generate easy and sophisticated reverse or bind shell commands to help you during penetration tests. Don't waste more time with .txt files storing your Reverse shells! Installation Python 2.7 is required. 3.0+ version wil...

CVE-2016-10956-mail-masta

Mail Masta - Local File Read CVE-2016-10956 The mail-masta plugin 1.0 for WordPress has local file read in countofsend.php and csvexport.php. Usage root@kitploit: $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETUR...

mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕 Want to support mailcow? Please consider a support contract with Servercow to support further development. We support you while you support us. : You can also get a SAL which is a one-time payment with no liabilities or returning fees. Or just spread the word: moo...

Mail Mint < 1.19.5 - Unauthenticated Email Disclosure

Mail Mint WordPress plugin 1.19.5 contains an information disclosure vulnerability caused by lack of authorization in a REST API endpoint, letting unauthenticated users retrieve email addresses of blog users, exploit requires no authentication. id: CVE-2026-2025 info: name: Mail Mint 1.19.5 -...

WordPress Mail Masta 1.0 - Local File Inclusion

WordPress Mail Masta 1.0 is susceptible to local file inclusion in countofsend.php and csvexport.php. id: CVE-2016-10956 info: name: WordPress Mail Masta 1.0 - Local File Inclusion author: daffainfo,0x240x23elu severity: high description: WordPress Mail Masta 1.0 is susceptible to local file...

RaidenMAILD Mail Server v.4.9.4 - Path Traversal

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component. id: CVE-2024-32399 info: name: RaidenMAILD Mail Server v.4.9.4 - Path Traversal author: DhiyaneshDK severity: high description: |...

Axigen Mail Server Filename Directory Traversal

Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. dot dot in the fileName parameter in a download action to source/loggin/pagelogdwnfile.hsp, or the fileName parameter in an edi...

IceWarp Mail Server <11.1.1 - Directory Traversal

IceWarp Mail Server versions prior to 11.1.1 suffer from a directory traversal vulnerability. id: CVE-2015-1503 info: name: IceWarp Mail Server 11.1.1 - Directory Traversal author: 0xAkoko severity: high description: IceWarp Mail Server versions prior to 11.1.1 suffer from a directory traversal...

IceWarp Mail Server v10.4.5 - Cross-Site Scripting

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting XSS vulnerability via the color parameter. id: CVE-2023-39700 info: name: IceWarp Mail Server v10.4.5 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | IceWarp Mail Server v10.4.5 was...

cve-2022-41352-zimbra-rce

CVE-2022-41352 Zimbra Nicht authentifizierte RCE CVE-2022-41352 ist eine Schwachstelle, die das Schreiben beliebiger Dateien arbitrary file write in Zimbra-Mailservern ermöglicht, verursacht durch die Verwendung einer verwundbaren cpio-Version. CVE-2022-41352 NIST.gov CVE-2022-41352 Rapid7-Analys...

CVE-2020-0688

python3 CVE-2020-0688.py mail.chinabaiker.com [email protected] password command...

mail-security-tester

Framework de Teste de Segurança de E-mail Um framework de testes para soluções de segurança e filtragem de e-mail. IMPORTANTE: Não faça nada de maldoso com isso! Testes de soluções em nuvem ou hospedadas devem sempre ser aprovados pelo provedor testado. Use apenas suas próprias contas de teste e...

mailinabox

Mail-in-a-Box Di @JoshData e collaboratori. Mail-in-a-Box aiuta le persone a riprendere il controllo della propria email offrendo un server SMTP+e-quant'altro facile da distribuire con un solo clic: un server di posta in una scatola. Consultahttps://mailinabox.email per il sito web del progetto e...

SMTPTester

SMTPTester SMTPTester एक python3 टूल है जो SMTP सर्वर में 3 सामान्य कमजोरियों का परीक्षण करता है: स्पूफिंग - किसी आंतरिक उपयोगकर्ता की ओर से ईमेल भेजने की क्षमता रिले - संगठन के बाहर अन्य पतों पर ईमेल भेजने के लिए इस SMTP सर्वर का उपयोग करना उपयोगकर्ता गणना - SMTP VRFY कमांड का उपयोग करके यह जांच...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

CVE-2023-0860

CVE-2023-0860 Brute-Force-Angriff auf die Modoboa Mail Hosting- und Management-Anwendung v2.0.3 Die Open-Source-Mail-Hosting- und Management-Anwendung Modoboa = v2.0.3 schränkt nicht authentifizierte Anmeldeversuche nicht ein, was Brute-Force-Angriffe auf der Anmeldeseite ermöglicht...

CVE-2024-28589

CVE-2024-28589 Una vulnerabilità è stata scoperta in Axigen Mail Server per Windows, che interessa tutte le versioni fino alla 10.5.18 e consente l'escalation locale dei privilegi. Descrizione: È stato riscontrato che Axigen Mail Server è vulnerabile a un'escalation locale dei privilegi a causa d...