pepe

PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...

pepe

PEPE - Emails Pastebin de Post-Exploitation Collectez des informations sur les adresses email divulguées depuis Pastebin À propos Le script analyse les dumps email:motdepasse de Pastebin et collecte des informations sur chaque adresse email. Il supporte Google, Trumail, Pipl, FullContact et...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

Gitmails

التطوير - هام لم يعد هذا الإصدار من Gitmails مدعومًا. يُرجى مراجعة منفذ Gitmails Shell إذا كنت ترغب في استخدام إصدار مدعوم، ومن المأمول أن يتم تطويره. إذا كنت لا ترغب في استخدام منفذ shell وتفضل إصدار Python، فلا تتردد في عمل fork للمشروع وتوجيهه إلى أي مسار تراه مناسبًا. نظرة عامة Gitmails يستكش...

EmailFinder

EmailFinder EmailFinder предназначен для поиска email-адресов компании, которые отфильтрованы поисковыми системами. Это делается путем поиска @company.com. Цель состоит в том, чтобы количество email-адресов в поисковых системах было минимальным. Установка: root@kitploit: pip3 install emailfinder...

responsible-disclosure-email-gathering

Collecte d'emails pour la divulgation responsable Objectif Vous avez peut-être trouvé une vulnérabilité sur un hôte, mais cet hôte/organisation ne dispose pas d'un programme actif sur HackerOne ou BugCrowd. Si c'est le cas, ce workflow est fait pour vous ! En gros, il explorera le site Web et...

SpoofcheckSelfTest

SpoofCheck Self Test Application web qui vous permet de tester si votre domaine est vulnérable à l'usurpation d'e-mail. NOTE : Cette application est encore en développement. Installation : Cette application est conçue pour être utilisée comme un service. Cependant, si vous souhaitez l'héberger...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

Laravel Backpack CRUD: MyAccountController allows changing the login email without a current-password check

Summary MyAccountController::postAccountInfoForm allows an authenticated user to update the authentication column default: email without verifying their current password. Because email is the account-recovery anchor, this enables account takeover after the attacker's session ends: the new email...

CVE-2026-77020

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-77020 CodeAstro Apartment Visitor Management System password-recovery.php sql injection

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-64964

ATutor (open-source learning management system) is vulnerable to predictable email confirmation token generation in its account confirmation functionality. The root cause is the use of insufficiently random values tied to user registration, allowing an attacker who can predict these values to gue...

Atmail-exploit-toolchain

AtMail Email Server Appliance 6.4 - Chaîne d'outils d'exploitation XSS CSRF RCE PacketStorm WLB-2020080010 Avertissement : cette chaîne d'outils d'exploitation a été inspirée par EDB-ID 20009. Objectif L'objectif de cette chaîne d'outils d'exploitation est de remplacer EDB-ID 20009. Avantages de...

mime-is-broken

Boîte à outils pour générer et tester des MIME invalides Ceci est une boîte à outils pour générer des e-mails avec un MIME cassé afin de tester le comportement des MUA et des produits de sécurité, c'est-à-dire s'ils se conforment ou si un MIME cassé pourrait être utilisé pour contourner un produi...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

EUVD-2026-62915

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could configure Portable Document Format PDF attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search...

PT-2026-79068

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2025-63419

CVE-2025-63419 CrushFTP avant 11.3.760 est vulnérable à l'injection HTML. Le serveur web dispose d'une fonctionnalité permettant aux utilisateurs de partager des fichiers, qui reflète le nom du fichier dans un champ emailbody sans assainissement, conduisant à une injection HTML. CWE CWE-79 —...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Аутентифицированная Администратор+ произвольная загрузка файлов через параметр 'mdjmemailuploadfile' Плагин WordPress MDJM Event Management версии 1.7.8.3 и более ранние содержит уязвимость произвольной загрузки файлов, которая позволяет аутентифицированным...