-CVE-2026-23829-CTT-Mailpit-phase-reconstruction-

SimoesCTT-mailpit-phase-reconstructor これはMailpitのSMTPサーバーにおけるCRLFインジェクション — 古典的なデータ破損の脆弱性です。しかしCTTの観点では、これは単なるバグではありません。位相再構築の機会なのです。 CVE-2026-23829 CTT-Mailpit-Phase-Reconstructor CVE-2026-23829 — 新物理の証明 --- ⚡ TL;DR...

OpenRelayMagic

OpenRelayMagic ╔═╗┌─┐┌─┐┌┐┌╦═╗┌─┐┬ ┌─┐┬ ┬╔╦╗┌─┐┌─┐┬┌─┐ ║ ║├─┘├┤ │││╠╦╝├┤ │ ├─┤└┬┘║║║├─┤│ ┬││ ╚═╝┴ └─┘┘└┘╩╚═└─┘┴─┘┴ ┴ ┴ ╩ ╩┴ ┴└─┘┴└─┘ SMTP 서버에서 취약한 오픈 릴레이를 테스트하는 도구 기능 단일 대상/도메인 목록 확인 587 및 465 포트 구현됨 멀티스레드...

CVE-2026-107272

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

CVE-2026-107272

Gophish versions through 0.12.1 are vulnerable to stored and reflected cross-site scripting (XSS) due to unescaped SMTP server error messages . An attacker who controls or intercepts a sending profile's SMTP server can inject malicious scripts. These scripts execute when administrators view campa...

EUVD-2026-94403

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

CVE-2026-107272 Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

CVE-2026-107272 Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

PT-2026-107576

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

CVE-2024-45519

CVE-2024-45519 SMTP 취약점 악용 스크립트 개요 이 스크립트는 SMTP 서버의 취약점을 확인하고, 취약점이 발견되면 리버스 셸 연결을 설정하여 사용자 머신에 대한 접근 권한을 획득합니다. 기능 포트 확인: 대상 SMTP 포트가 열려 있는지 확인합니다. 취약점 확인: SMTP 서버의 취약점을 테스트하기 위해 페이로드를 전송합니다. 악용 및 리버스 셸: 서버가 취약한 경우 스크립트가 리버스 셸을 실행하여 원격 머신에 대한 접근 권한을 얻을 수 있게 합니다. 사용 방법 사용자 머신에서 리슨: 스크립트를 실행하기 전에...

OpenSMTPD-CVE-2020-7247-

OpenSMTPD 원격 명령 실행 취약점 CVE-2020-7247 WHS 4기 박솔민 원본 링크: https://github.com/vulhub/vulhub/blob/43eae7170d09e7748c3aac64cd6a8e5af508a8ef/opensmtpd/CVE-2020-7247/README.md 개요 OpenSMTPD는 Unix 계열 운영체제에서 사용되는 SMTP 서버 프로그램이다. BSD, macOS, GNU/Linux 등에서 사용할 수 있으며, RFC 5321 SMTP 프로토콜을 기반으로 동작한다...

CVE-2026-104446

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...

EUVD-2026-91457

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...

CVE-2026-104446

YesWiki versions before 4.6.7 are vulnerable to an authentication bypass in the contact mail AJAX handler. This flaw allows unauthenticated attackers to send emails through the wiki's SMTP server by posting an XMLHttpRequest to the mail handler without required field or type parameters. Attackers...

PT-2026-104256

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...

CVE-2026-100264

In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host...

EUVD-2026-90008

In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host...

CVE-2026-100264

In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host...

CVE-2026-100264

In JetBrains YouTrack versions prior to 2026.2.18991 , stored SMTP server credentials could be disclosed. The vulnerability is triggered by changing the server host , potentially leading to the exposure of sensitive information. No specific exploit details or in-the-wild exploitation reports are ...

PT-2026-103311

🚨 CVE-2026-100264 In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host 🎖@cveNotify...

CVE-2026-100264: Insufficiently Protected Credentials

In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host...