EmBomber

EmBomber Gmail, Yahoo, Hotmail/Outlook을 지원하는 이메일 폭탄 파이썬 스크립트 로 제작, Mazen Elzanaty 기능 Gmail 지원 Yahoo 지원 Hotmail/Outlook 지원 사용법 EmBomber는 Python 2.7이 설치된 모든 Linux 배포판에서 작동해야 합니다. 먼저 터미널에서 다음 명령어를 입력하여 클론합니다. root@kitploit: git clone https://github.com/MazenElzanaty/EmBomber.git 이제 EmBomber 디렉토리로...

CVE-2026-31283

CVE-2026-31283 説明 パスワード忘れを利用して、被害者のメールアドレスにメール爆撃攻撃を仕掛けることができます。 CVSS 3 スコア: 7.5 High 攻撃タイプ リモート（認証不要） 影響を受けるバージョン バージョン 19.1.5 以前 ベンダー Totara 影響を受ける製品コードベース Totara LMS 影響を受けるコンポーネント パスワード忘れ API。 緩和策 パスワード忘れ API にレート制限を実装する。 脆弱性の詳細 パスワード忘れ API...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ フィッシング、OTP/メールボミング、偽メールなどを自動化する強力なソーシャルエンジニアリングツールキットです — @karthithehacker が ❤️ を込めて制作しました ⚠️ 教育目的のみに使用してください。明示的な許可なく、誰に対してもこのツールを使用しない でください。 📌 特徴 🎯 フィッシング攻撃 – 認証情報を窃取するための偽ログインページをシミュレートします 🔢 OTPボミング – ターゲットの電話番号にOTPリクエストを大量送信します 📩 メールボミング – 受信箱を妨害するための大量メール送信 📧 偽メール送信 –...

CVE-2025-54321

CVE-2025-54321 비밀번호 재설정 이메일 폭탄 공격 설명 비밀번호 재설정 기능은 대상 이메일 주소에 대한 비율 제한을 구현하지 않습니다. 이로 인해 이메일 폭탄 공격Email Bombing이 가능합니다. CVSS 점수: 7.1 높음 공격 유형 원격 인증됨 영향을 받는 버전 8.6.8 이하 버전 제품 공급업체 Ascertia 영향을 받는 제품 코드 베이스 SigningHub 영향을 받는 구성 요소 비밀번호 재설정 기능. 완화 조치 비밀번호 재설정 API에 비율 제한을 구현합니다. 취약점 세부 정보 비밀번호 재설정 기능에...

CVE-2025-54320

CVE-2025-54320 Invite User 이메일 폭탄 설명 초대 API는 대상 이메일 주소에 대한 속도 제한rate limiting을 구현하지 않습니다. 이로 인해 이메일 폭탄Email Bombing 공격이 가능합니다. CVSS 점수: 7.1 높음 공격 유형 원격 인증됨 영향을 받는 버전 8.6.8 이후 버전 발견자: Yazan Abu-Nadi...

CVE-2026-31283

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...

EUVD-2026-21931

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack...

CVE-2026-31283

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...

CVE-2026-31283

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...

Totara LMS 安全漏洞

Totara LMS is an learning management system provided by the Totara company. Versions of Totara LMS prior to v19.1.5 contained security vulnerabilities. These vulnerabilities stemmed from the forget password API not implementing rate limits on target email addresses, which could lead to email...

PT-2026-32360

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack...

CVE-2026-31283

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...

CVE-2026-31283

CVE-2026-31283 impacts Totara LMS v19.1.5 and earlier, where the forgot password API lacks rate limiting for target email addresses. This underpins a potential Email Bombing attack; the root cause is insufficient request throttling in the forgot password flow. Public details confirm affected prod...

CVE-2026-31283

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

EUVD-2025-198073

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

EUVD-2025-198072

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...