legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

CVE-2019-11395

CVE-2019-11395 익스플로잇 🛡️ CVE-2019-11395 정보 🕵️ CVE-2019-11395 취약점은 MailCarrier 2.51 이메일 애플리케이션의 버퍼 오버플로 취약점으로, 원격 코드 실행을 허용합니다. 이 취약점은 SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP 또는 POP3 RETR 프로세스에서 발생합니다. 학술 연구 과정에서 PoCProof of Concept를 제작하기 위해 POP3 프로세스에 초점을 맞추었습니다. 애플리케이션에 6000바이트를 전송하면 작동이 중지되어...

CVE-2003-0264_EXPLOIT

CVE-2003-0264익스플로잇 Seattle Lab Mail SLmail 5.5 - POP3의 버퍼 오버플로우 Simple STACK BAsed BUffer Overflow Step By Step 1 애플리케이션 퍼징 In the very First Step we will Fuzz The Application With a Simple Spike Script meanwhile we wil also have SLmail attachedand running to immunity Debugger Spike에 대한 자세한...

mailenable-cve-2022-36934

MailEnable CVE-2022-36934 익스플로잇 모듈 MailEnable의 인증 우회 취약점CVE-2022-36934을 이용한 Metasploit 모듈로, 원격 코드 실행으로 이어집니다. 📌 기능 SMTP/POP3에서 MailEnable의 부적절한 입력 검증을 익스플로잇합니다. x86 및 x64 Windows 대상을 모두 지원합니다. 사용자 상호 작용 불필요조작된 이메일을 통해 자동 트리거. MailEnable 10.40 미만 버전에서 동작합니다. 🚀 설치 1. Metasploit 모듈 디렉터리로 복사합니다: cp...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

CVE-2003-0264

SLMail 5.5 POP3 PASS 매개변수 버퍼 오버플로우 프로그램 버전: SLMail 5.5 취약점: Seattle Lab Mail SLMail 5.5 POP3 서비스포트 110 PASS 매개변수 버퍼 오버플로우 테스트 환경: Windows 7 x86 공격 방법: 원격 버퍼 오버플로우 PoC 동영상: https://youtu.be/dCWgoSIni6s...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

CVE-2003-0264

🐳 CVE-2003-0264: SLMail 5.5 - 스택 기반 버퍼 오버플로우 SLMail 5.5의 전형적인 스택 기반 버퍼 오버플로우로, 과도한 크기의 SMTP 및 POP3 명령을 통해 초기 메일 서버가 어떻게 손상될 수 있는지 보여줍니다. 📑 목차 이 저장소가 존재하는 이유 이 취약점이 흥미로운 이유 컨텍스트 및 영향을 받는 소프트웨어 취약점에 관하여 충돌 유발 익스플로잇 🎓 이 저장소가 존재하는 이유 이 저장소는 메모리 손상 익스플로잇을 가르칠 때 사용하는 자료의 일부입니다 정규 업무 외에도 다양한 사이버 보안 과정에서...

CVE-2019-11395

CVE-2019-11395 개요 이 PoCProof of Concept는 MailCarrier 2.51의 버퍼 오버플로 취약점 을 보여주며, 원격 공격자가 긴 문자열을 통해 임의 코드를 실행할 수 있도록 합니다. 이 취약점은 다음 프로세스를 이용하여 악용될 수 있습니다: SMTP RCPT TO POP3 USER POP3 LIST POP3 TOP POP3 RETR 이 프로젝트는 버퍼 오버플로가 어떻게 작동하는지 이해하는 데 학술적 접근 방식 을 제공하는 것을 목표로 합니다. ⚠️ 경고 테스트를 실행하기 전에 초기 실험에 절대...

CVE-2003-0264-SLmail-5.5

CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 버퍼 오버플로우 참조 https://vulners.com/cve/CVE-2003-0264 취약점 SLMail은 POP3 비밀번호를 제출할 때 경계 검사를 수행하지 않습니다. 그 결과, SLMail 서버에 길고 잘못된 형식의 POP3 PASS를 제출하여 임의의 코드를 실행할 수 있습니다...

Rocky Linux 8 [CIQ] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (crlsa-2026_2128)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262128 advisory. cpython: wsgiref.headers.Headers allows header newline injection in Python CVE-2026-0865 cpython: IMAP command injection in user-controlled commands...

Rocky Linux 8 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_4463)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264463 advisory. cpython: wsgiref.headers.Headers allows header newline injection in Python CVE-2026-0865 cpython: IMAP command injection in user-controlled commands...

Rocky Linux 10.1 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (crlsa-2026_4713)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264713 advisory. cpython: wsgiref.headers.Headers allows header newline injection in Python CVE-2026-0865 cpython: IMAP command injection in user-controlled commands...

Rocky Linux 8 [CIQ] Security Update: python3.11 / python3.11-debug / python3.11-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_4473)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264473 advisory. cpython: wsgiref.headers.Headers allows header newline injection in Python CVE-2026-0865 cpython: IMAP command injection in user-controlled commands...

Rocky Linux 9 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_4165)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264165 advisory. cpython: IMAP command injection in user-controlled commands CVE-2025-15366 cpython: POP3 command injection in user-controlled commands CVE-2025-15367...

Rocky Linux 9 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (crlsa-2026_4168)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264168 advisory. cpython: IMAP command injection in user-controlled commands CVE-2025-15366 cpython: POP3 command injection in user-controlled commands CVE-2025-15367...

CVE-2026-100741

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

CVE-2026-100741 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

PT-2026-99509

Name of the Vulnerable Software and Affected Versions hMailServer versions 6.0.0 through 6.3.3 Description An eval injection exists in the JScript event-script dispatcher on Windows. A remote, unauthenticated attacker can execute arbitrary JScript within the service process using the privileges o...