CVE-2018-15131

Zimbra Collaboration User Enumeration Script CVE-2018-15131 How to use The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it. root@kali ./cve-2018-15131-user-enum.py --host...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 The vulnerability was caused by a bug in how GitLab handled email verification during password reset. An attacker could provide two email addresses during a password reset request, and the reset code would be sent to both addresses. This...

CVE-2018-8718

Exploit Title : Jenkins mailer plugin CSRF Vulnerability - Send CSRF MAIL Date : 2018/06/05 Exploit Author : Yeom Geun Cheol Vendor Homepage : https://jenkins.io/ Software Link : https://updates.jenkins.io/download/plugins/mailer/1.20/mailer.hpi Version: Below Version 1.20 1.1 1.20 Tested on :...

AllPhish

Hacker Destination's Twitter - Hacker Destination's Blog Webpages : 1 Facebook| 2 Gmail ---|--- 3 Instagram| 4 Twitter 5 Github| 6 Netflix 7 Paypal| 8 Origin 9 Steam| 10 Yahoo 11 LinkedIn| 12 ProtonMail 13 Wordpress| 14 Microsoft 15 IGFollowers| 16 Ebay 17 Pinterest| 18 CrytoCurrency 19 Verizon|...

email-header-analyzer

E-Mail Header Analyzer MHA What is E-Mail header analyzer MHA: E-Mail header analyzer is a tool written in flask for parsing email headers and converting them to a human readable format and it also can: Identify hop delays. Identify the source of the email. Identify hop country. MHA is an...

CVE-2023-5561-PoC

CVE-2023-5561-PoC WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack Source:...

OutlookLeakTest

The Outlook HTML Leak Test Project! Blog post: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ What's in "./Schemes-List.xlsx"? List of URI schemes that might work in Windows. These schemes/protocols can be useful in...

CVE-2021-26855-d

Basic usage:python owamails.py -u -l -p optional arguments: -h, --help show this help message and exit -u URL, --url URL Url, provide schema and not final / eg https://example.org -l LIST, --list LIST Users mailbox list -p PATH, --path PATH Path to write emails in xml format -f FQDN, --fqdn FQDN...

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Windows OLE Zero-Click RCE Exploitation Detected CVE-2025-21298 Walkthrough 🔎 Table of Content 1. Situation 2. Alert Overview 3. Tools Used 4. Analysis Email Security Log Management Proxy Log Endpoint Security Terminal History Network Action Processes CVE-2025-21298 Playbook Analyst Note...

email-prediction-asterisks

ASTERISKS & OBELIX Email prediction asterisks is a script that allows you to identify the emails hidden behind asterisks. It is a perfect application for osint analysts and security forces. It allows to intelligently predict, using Intelx leaks, which emails are related to the person we are looki...

Camelishing

Camelishing Social Engineering Tool Camelishing Social Engineering Tool Python 3x Contact !CONTACT! | Coded Abdulaziz ALTUNTAŞ | | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Features 1-Bulk email sending 2-Basic Python Agent Creator 3-Office Excel...

CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - Unauthenticated SQL Injection Description: The RSVPMarker plugin for WordPress is vulnerable to SQL Injection via the 'email' parameter in versions up to, and including, 10.6.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...

wildlogger

\ \ / | | | | | \ \ /\ / / | | | | | | \ / / / | | |/ | | | / \ / |/ |/ \ '| \ /\ / | | | | | | || | | | | | / | / / |||,| |/ , |, ||| / | / | |/ |/ Description A keylogger designed for Windows operating system that captures connection information, device system information, a list of...

cve-2023-42820

cve-2023-42820 JumpServer Affected Versions v2.24 - v3.6.4 Impact With knowledge of the email associated with the JumpServer admin user account default: admin/[email protected], it is possible to reset the admin password through this vulnerability, and by combining it with JumpServer's...

CobaltStrike-BOF

CobaltStrike BOF Collection of beacon BOF. 1 DCOM Lateral Movement A quick PoC that uses DCOM ShellWindows via beacon object files for lateral movement.You can either specify credentials or use the current user. To use the current user, just leave the domain, username, and password empty. A short...

CVE-2026-36340

CVE-2026-36340 Remote Code Execution RCE Vulnerability in Krayin CRM v2.1.5 Remote Code Execution RCE Vulnerability in Krayin CRM v2.1.5 CVE: CVE-2026-36340 Severity: Critical Affected Product: Krayin CRM v2.1.5 Vulnerability Type: Remote Code Execution RCE Authentication Required: Yes Summary A...

CVE-2021-35956

CVE-2021-35956. Proof of Concept Exploit for CVE-2021-35956, AKCP sensorProbe - 'Multiple' Cross Site Scripting XSS. Exploit Title: AKCP sensorProbe - 'Multiple' Cross Site Scripting XSS. Date: 07-01-2021. Exploit Author: Tyler Butler. Vendor Homepage: https://www.akcp.com/. Software Link:...

CVE-2019-18818

CVE-2019-18818 Usage : url Reference : https://vulners.com/cve/CVE-2019-18818 https://thatsn0tmysite.wordpress.com/2019/11/15/x05/...

WhoAmIMailBot

Who Am I Mail Bot What is it? Who Am I Mail Bot is a service to mask your e-mails. It was inspired by Blur, where you can create an alias for your e-mail and use it to signup on applications. The problem with Blur is that all e-mails pass trough their infraestructure and I don't need/want anybody...

PT-2026-127811

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predictable Email-Verification Token in all versions up to, and including, 2.8.2. This is due to the authenticate user by email link function — hooked on the wp action and triggered b...