CVE-2026-51788

Security Advisory: CVE-2026-51788 Denial of Service DoS Vulnerability in cleverangeauth v0.1.10 CVE ID: CVE-2026-51788 Status: Assigned Date Discovered: 2026-04-27 Researcher: Aykhan Isgandarli Severity: High CVSS v3.1: 7.5 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Produc...

EmailXpose

EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

CVE-2026-11113 – SMTP Header Injection in Contact Form Program Code Python root@kitploit: contactformserver.py - Mails feedback without sanitizing headers from flask import Flask, request import smtplib app = Flaskname @app.route'/contact', methods='POST' def contact: sender = request.form'email'...

Emat

Emat Emat is an advanced scraping tool designed to collect email accounts from platforms like Gmail, Yahoo, Hotmail, and government email services. However, it's crucial to emphasize that the script should only be used for educational purposes and not for any abusive or unethical activities. To...

0day-security-software-vulnerability-analysis-technology

0day-security-software-vulnerability-analysis-technology Notes on Using the Companion Resource Pack for "0day Security: Software Vulnerability Analysis Technology Second Edition" The materials in this resource pack are for learning purposes only. No organization, individual, or institution may us...

wordpress-exploits

wordpress-exploits Random Wordpress Exploits May or May Not Work. CVE-2019-19985 Info root@kitploit: Description: Unauthenticated File Download w/ Information Disclosure CVE ID: CVE-2019-19985 CVSS v3.0 Score: 5.8 Medium CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected...

ninja-forms-brute

Ninja Forms 3.6.8 - Unauthenticated Email Address Disclosure Description The plugin does not delete the temporary files created when exporting submissions, which could allow unauthenticated attackers to download them and get sensitive information such as the email address of users who submitted a...

elastic-search-email-extractor

Email Extractor This Go program is designed to extract email addresses from a list of Elastic Search Databases. It takes in a list of URLs and will search the Database of each URL to find email addresses. Install root@kitploit: go install...

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

pepe

PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...

pepe

PEPE - Correos Electrónicos de Pastebin para Post-Explotación Recopila información sobre direcciones de correo electrónico filtradas de Pastebin Acerca de El script analiza los volcados de email:contraseña de Pastebin y recopila información sobre cada dirección de correo electrónico. Soporta...

SocialPwned

SocialPwned SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and Twitter to find the possible credential leaks in PwnDB or Dehashed and obtain Google account information via GHunt. The purpose of this tool is to...

SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

Gitmails

Desarrollo - IMPORTANTE Esta versión de Gitmails ya no recibe mantenimiento. Echa un vistazo a la versión de Gitmails Shell si deseas usar una versión que recibe mantenimiento y, con suerte, se desarrolla. Si no deseas usar la versión de shell y prefieres la versión en Python, siéntete libre de...

InfoLeak-Scanner

InfoLeak-Scanner Docker First run docker run --rm -p 8000:80 siwecos/infoleak-scanner. Open your browser and use the scanner: http://localhost/?url= Install Get php5, curl and a webserver: root@kitploit: sudo apt-get install apache2 php5 php5-curl Copy application into webserver: root@kitploit: c...

CVE-2026-97735

ITFlow before 26.08 allows SVG attachments in the ticket email parser cron/ticketemailparser.php for email messages that may arrive over SMTP from arbitrary senders...

CVE-2026-97735

Versions of ITFlow before 26.08 are vulnerable to a flaw in the ticket email parser (cron/ticket_email_parser.php). The software allows SVG attachments in email messages arriving over SMTP from arbitrary senders. This vulnerability could allow an attacker to process malicious SVG files, potential...

fake-mailer

Fake Mailer + Disclaimer : Fake Mailer is tool to Send Mail Anonymously from a different Email.This process can take upto 5 mins. This tool is created for Educational Purpose Only !! I am not responsible for any Misuse of this tool !! Installation : apt update apt install git python2 -y git clone...