OpenRelayMagic

OpenRelayMagic ╔═╗┌─┐┌─┐┌┐┌╦═╗┌─┐┬ ┌─┐┬ ┬╔╦╗┌─┐┌─┐┬┌─┐ ║ ║├─┘├┤ │││╠╦╝├┤ │ ├─┤└┬┘║║║├─┤│ ┬││ ╚═╝┴ └─┘┘└┘╩╚═└─┘┴─┘┴ ┴ ┴ ╩ ╩┴ ┴└─┘┴└─┘ 用于测试SMTP服务器上易受攻击的开放中继的工具 功能 检查单个目标/域名列表 支持587和465端口 多线程...

CVE-2024-45519

CVE-2024-45519 SMTP漏洞利用脚本 概述 该脚本检查SMTP服务器的漏洞，如果发现漏洞，则利用该漏洞向您的机器建立反向Shell连接。 功能特点 端口检查 ：验证目标SMTP端口是否开放。 漏洞检查 ：发送负载以测试SMTP服务器的漏洞。 利用与反向Shell ：如果服务器存在漏洞，脚本将执行反向Shell，使您能够获取远程机器的访问权限。 使用方法 1. 在您的机器上监听 ：运行脚本之前，打开一个终端并监听传入连接： nc -lvnp 4444 （将 4444 替换为您选择的端口，与脚本中的端口一致。） 2. 运行脚本...

OpenSMTPD-CVE-2020-7247-

Vulnerabilidad de ejecución remota de comandos en OpenSMTPD CVE-2020-7247 WHS 4기 박솔민 Enlace original: https://github.com/vulhub/vulhub/blob/43eae7170d09e7748c3aac64cd6a8e5af508a8ef/opensmtpd/CVE-2020-7247/README.md Resumen OpenSMTPD es un programa servidor SMTP utilizado en sistemas operativos ti...

CVE-2026-104446

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...

EUVD-2026-91457

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...

CVE-2026-104446

YesWiki versions before 4.6.7 are vulnerable to an authentication bypass in the contact mail AJAX handler. This flaw allows unauthenticated attackers to send emails through the wiki's SMTP server by posting an XMLHttpRequest to the mail handler without required field or type parameters. Attackers...

-CVE-2026-23829-CTT-Mailpit-phase-reconstruction-

SimoesCTT-mailpit-phase-reconstructor Es una inyección CRLF en el servidor SMTP de Mailpit: una vulnerabilidad clásica de corrupción de datos. Pero bajo CTT, no es solo un bug. Es una oportunidad de reconstrucción de fase. CVE-2026-23829 CTT-Mailpit-Phase-Reconstructor CVE-2026-23829 — Prueba de...

CVE-2026-100264

In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host...

CVE-2026-100264

In JetBrains YouTrack versions prior to 2026.2.18991 , stored SMTP server credentials could be disclosed. The vulnerability is triggered by changing the server host , potentially leading to the exposure of sensitive information. No specific exploit details or in-the-wild exploitation reports are ...

EUVD-2026-90008

In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host...

CVE-2026-100264

In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host...

PT-2026-103311

🚨 CVE-2026-100264 In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host 🎖@cveNotify...

CVE-2026-100264: Insufficiently Protected Credentials

In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host...

CVE-2026-75123

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...

CVE-2026-75123 PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_smtp_test_post

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...

EUVD-2026-67783

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...

CVE-2026-75123 PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_smtp_test_post

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...

CVE-2026-75123

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web_smtp_test_post handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization, allowing a remote attacker...

PT-2026-83269

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web smtp test post handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...

CVE-2026-75123: Improper Neutralization of Special Elements used in an OS Command

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...