xsshunter-express

XSS Hunter Express 5分钟内完成部署，且无需维护 部署 XSS Hunter 以测试和发现盲跨站脚本（blind XSS）漏洞的最快方式。 部署（五分钟，请尽量不要略读太多内容） 环境要求 已安装 docker 和 docker-compose 至少 2 GB 内存的主机 一个可映射到服务器 IP 的主机名（例如 host.example.com）（需拥有 DNS 控制权） 用于邮件通知 如需接收 XSS 载荷触发的邮件通知，你需要一个具有有效 SMTP 凭据的电子邮件账户。你可以使用 Gmail 等常规电子邮件账户来实现此目的。如果你不需要邮件通知，则此项非必需。...

CVE-2026-77352

Wallos is an open-source, self-hostable personal subscription tracker. From version 2.0.0 to before version 5.0.0, any authenticated Wallos user no admin rights required can make the server open arbitrary outbound SMTP connections to internal/link-local addresses, by setting the SMTP host of thei...

EUVD-2021-18858

Malware in sbrugna...

Buffer overflow

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage...

CVE-2021-31986

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage...

CVE-2021-31986

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage...

Symantec Multiple Products VRTSweb Code Execution (CVE-2009-3027)

Symantec VERITAS Web Server VRTSweb is a shared component shipped with multiple Symantec products. VRTSweb is a Web Restore Server Component which can be used for managing Server SSL certificates, configuring SMTP notifications, managing communication ports, and other tasks. VRTSweb is developed...