Sinister

Sinister 这个小型的Python脚本能够完成非常出色的工作。 Sinister是一个键盘记录器生成器，适用于Windows/Linux，它能通过电子邮件发送按键记录和屏幕截图，以及其它有价值的受害者信息，使用Python 3编写。 免责声明 :computer: 本项目仅用于正当目的和个人使用。 本软件按“原样”提供，不附带任何形式的明示或暗示担保。您自行承担使用本软件的风险。使用完全由最终用户负责。开发者不承担任何责任，也不对因使用本程序而造成的任何误用或损害负责。 功能特性 支持Windows/Linux 通过电子邮件通知新受害者 无法被检测 持久化 在生成载荷前验证电子邮件...

CVE-2024-42009

Roundcube Webmail 1.6.7 的 XSS 漏洞利用脚本（CVE-2024-42009） 描述 该脚本利用 Roundcube Webmail 1.6.7 版本中的存储型 XSS 漏洞（CVE-2024-42009）。它向 Webmail 系统注入恶意载荷，当被触发时，会窃取受害者收件箱中的电子邮件内容。 功能 使用 Python HTTP 监听器捕获并解码被盗取的邮件内容。 通过联系表单发送 XSS 载荷。 提取并打印捕获的邮件正文。 使用方法 1. 启动监听器： python3 exploit.py 2. 在exploit.py 中配置攻击设置 将 TARGETURL...

CVE-2024-42009

CVE-2024-42009 PoC：电子邮件捕获监听器与XSS漏洞利用 概述 本概念验证（PoC）演示了针对CVE-2024-42009漏洞的利用方法，利用跨站脚本（XSS）漏洞从目标Webmail应用程序中提取电子邮件。攻击注入恶意载荷，将邮件内容外泄到攻击者控制的监听器。 特性 利用XSS漏洞捕获电子邮件内容。 使用HTTP监听器接收并解码外泄的电子邮件。 自动化载荷注入与外泄过程。 依赖 Python 3.x 所需依赖（通过pip安装）： pip install requests beautifulsoup4 使用方法 使用必要参数运行脚本： python exploit.py...

SharpExchange

SharpExchange Este POC de línea de comandos demuestra cómo se puede usar C para interactuar con Microsoft Exchange EWS, mostrando que puede hacerse con otras herramientas además de PowerShell. Sí, es un POC simple para mostrar cómo podría hacerse. No es 100%. Si quieres lucir tus habilidades l33t...

CVE-2024-37383-exploit

Exploit Title: Roundcube mail server exploit for CVE-2024-37383 Stored XSS Google Dork: Exploit Author: AmirZargham Vendor Homepage: Roundcube - Free and Open Source Webmail Software Software Link: Releases · roundcube/roundcubemail Version: Roundcube client version earlier than 1.5.6 or from 1.6...

CVE-2026-86741

Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can inject markdown image syntax or raw HTML tags pointing to local files or remote URLs, which the mail auto-embed library r...

CVE-2026-16773

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5.9 via the wpbotsendemailtranscriptfree. This makes it possible for unauthenticated attackers to exfiltrate full chat...

PT-2026-65449

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5.9 via the wpbot send email transcript free. This makes it possible for unauthenticated attackers to exfiltrate full...

Linux Distros Unpatched Vulnerability : CVE-2026-58451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server...

Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

MAL-2026-4862 Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

CVE-2026-40569: Improper Access Control

FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a mass assignment vulnerability in the mailbox connection settings endpoints of FreeScout connectionIncomingSave at app/Http/Controllers/MailboxesController.php:468 and connectionOutgoingSave at line 398...

PT-2026-34019

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.213 Description An issue exists in the mailbox connection settings endpoints where the functions connectionIncomingSave and connectionOutgoingSave pass all request data directly to the mailbox fill method withou...

Malicious Package

Overview urql-introspection is a malicious package. This package was recognized as part of the 'PhantomRaven' supply chain campaign, which involves credential-stealing malware. The package impersonates well-known ecosystem plugins to deceive developers into installing it. Malicious Behavior The...

CVE-2026-1280

The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability check on the 'wpfmsendfileinemail' AJAX action in all versions up to, and including, 23.5. This makes it possible for unauthenticated attackers to share arbitrary uploaded files v...

Malicious Package

Overview postmark-mcp is a malicious package. This is an MCP Model Context Protocol server intended to let AI assistants send emails via Postmark and it was reportedly modified to secretly exfiltrate email contents by adding a blind-copy BCC to an external domain. Note: If you have installed or...

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit in Ro...

Exploit for Cross-site Scripting in Roundcube Webmail

XSS Exploit for Roundcube Webmail 1.6.7 CVE-2024-42009 D...

Inside Operation Diplomatic Specter: Chinese APT Group's Stealthy Tactics Exposed

Governmental entities in the Middle East, Africa, and Asia are the target of a Chinese advanced persistent threat APT group as part of an ongoing cyber espionage campaign dubbed Operation Diplomatic Specter since at least late 2022. "An analysis of this threat actor's activity reveals long-term...

Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software

The threat actor known as Winter Vivern has been observed exploiting a zero-day flaw in Roundcube webmail software on October 11, 2023, to harvest email messages from victims' accounts. "Winter Vivern has stepped up its operations by using a zero-day vulnerability in Roundcube," ESET security...