432 matches found
Email-Vulnerability-Checker
Email Vulnerability Checker v2.1 Vérifiez si le domaine est vulnérable au spoofing grâce à Email-vulnerability-checker Fonctionnalités de la version 2.1 Ajout de la prise en charge pour enregistrer la sortie dans un fichier à l'aide du drapeau -o Ajout de vérifications supplémentaires qui...
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability 이 스크립트는 Microsoft Outlook에서 발견된 CVSS 점수 9.8의 중요한 보안 취약점인 CVE-2024-21413에 대한 개념 증명PoC을 제공합니다. MonikerLink 오류로 명명된 이 취약점은 로컬 NTLM 정보의 잠재적 유출 및 원격 코드 실행 가능성을 포함하여 광범위한 영향을 미칩니다. 🚀 사용법 이 도구를 책임감 있게 사용하고 대상 시스템 소유자의 승인을 받았는지 확인하십시오. ...
CVE-2023-7028-GitLab
GitLab-CVE-2023-7028 Пример python3 attack.py -u http://TargetIP:8000 -t [email protected] -e [email protected]...
EUVD-2026-54448
Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a user accesses the email, the stored cross-site scripting is triggered. This issue affects TeamDavid through Rollout 524...
CVE-2026-38444
osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting XSS via the email From-header display name. The value is extracted without sanitization in include/class.mailparse.php and stored raw in the poster field of ostthreadentry. When an unauthenticated attacker sends a reply email to an...
WordPress WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin <= 1.10.2 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection vulnerability
Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection vulnerability discovered by Jack Pas Dark. - Black Lantern Security in WordPress Plugin Contact Form by WPForms versions = 1.10.2...
@27works/posto (>=1.0.0, <=2.0.2), @abc45676/mailer (1.0.0) +316 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.8)
nodemailer NPM version =8.0.0, =1.0.0, =0.12.2, =0.5.3, =0.4.1, =2.0.2, =3.19.2, =0.0.1, =0.0.10, =1.0.0, =0.0.1, =1.0.0, =2.4.0, =2.1.108, =0.0.1, =0.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-17342526...
@27works/posto (>=1.0.0, <=2.0.2), @abc45676/mailer (1.0.0) +315 more potentially affected by unknown CVE via nodemailer (>=8.0.0, <=8.0.7)
nodemailer NPM version =8.0.0, =1.0.0, =0.12.2, =0.5.3, =0.4.1, =2.0.2, =3.19.2, =0.0.1, =0.0.10, =1.0.0, =0.0.1, =1.0.0, =2.4.0, =2.1.108, =0.0.1, =0.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-NODEMAILER-17342524...
EUVD-2026-32678
The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the sendtestemail function in all versions up to, and including, 3.4.7. This makes it possible for authenticated...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SUSE CVE-2026-48846
In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var value in an e-mail message, which may lead to information disclosure or access-control bypass...
CVE-2026-48846
In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var value in an e-mail message, which may lead to information disclosure or access-control bypass...
CVE-2026-48846
In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var value in an e-mail message, which may lead to information disclosure or access-control bypass...
EUVD-2026-31725
In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var value in an e-mail message, which may lead to information disclosure or access-control bypass...
Open-Xchange OX Dovecot Pro 访问控制错误漏洞
Open-Xchange OX Dovecot Pro is an email storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a access control vulnerability. This vulnerability stems from the IMAP SETACL command, which allows the anyone permission to be injected into the user’s...
Arbitrary Code Injection
Overview krayin/laravel-crm is a hand tailored CRM framework built on some of the hottest opensource technologies such as Laravel a PHP framework and Vue.js a progressive Javascript framework. Affected versions of this package are vulnerable to Arbitrary Code Injection via the compose email...
CVE-2026-36340
CVE-2026-36340 affects Krayin CRM v2.1.5; fixed in v2.1.6. The issue arises in Email → Compose when attaching files, allowing an authenticated user to upload PHP payloads to a publicly accessible directory, enabling remote code execution. Upgrade to v2.1.6 or apply vendor mitigations; PoC indicat...
CVE-2026-41426
CVE-2026-41426 affects pretalx (prior to 2026.1.0). An unauthenticated attacker can inject arbitrary HTML-rendered emails by embedding malformed HTML or markdown in a user-controlled template placeholder (e.g., account display name). The most direct vector is the password-reset flow: attacker cre...
WordPress plugin Responsive Blocks – Page Builder for Blocks & Patterns 输入验证错误漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
