CVE-2025-68624

N-able Mail Assure (formerly SolarWinds MSP Mail Assure), a cloud-based multi-tenant SMTP relay, contains a design-level authorization flaw (CWE-290) where an authenticated SMTP user can send outbound mail using MAIL FROM addresses of other tenants . After valid SMTP AUTH, the server accepts arbi...

CVE-2020-7247

CVE-2020-7247 Proof Of Concept Exploit for CVE-2020-7247 Remote Execution on OpenSMTPD 6.6.2 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 tested on: OpenBSD 6.6 credits to Marco Ivaldi [email protected] for payload Usage remote $ go run CVE-2020-7247.go -u 192.168.0.2 -p 25 -...

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

CVE-2025-29557

CVE-2025-29557 – ExaGrid MailConfiguration API Credential Disclosure 📝 Overview Vulnerability Title : SMTP Credential Disclosure via MailConfiguration API Product : ExaGrid EX10 Backup Appliance Versions Affected : 6.3 – 7.0.1.P08 CVE ID : CVE-2025-29557 Severity : High Attack Vector : Remote...

CVE-2024-21413

CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u sender email address -p sender password -d...

CVE-2024-21413-POC

CVE-2024-21413 - POC Usage: python CVE-2024-21413.py -host example.com -port 25 -from [email protected] -recipient [email protected] -url xx.xx.xx.xx/path/to/shared/file/r0tb1t.rtf !NOTE r00tb1t : is the shared test file word in this case from the attacker machine xx.xx.xx.xx. To ensure...

CVE-2020-7247-reproducer

CVE-2020-7247 OpenSMTPD Information This repository contains necessary files to build a Docker image that contains a vulnerable environment of OpenSMTPD 6.6.1p1. The vulnerability allows an attacker to execute arbitrary commands through a specially crafted SMTP session, specifically in the MAIL...

xsshunter-express

XSS Hunter Express 5分钟内完成部署，且无需维护 部署 XSS Hunter 以测试和发现盲跨站脚本（blind XSS）漏洞的最快方式。 部署（五分钟，请尽量不要略读太多内容） 环境要求 已安装 docker 和 docker-compose 至少 2 GB 内存的主机 一个可映射到服务器 IP 的主机名（例如 host.example.com）（需拥有 DNS 控制权） 用于邮件通知 如需接收 XSS 载荷触发的邮件通知，你需要一个具有有效 SMTP 凭据的电子邮件账户。你可以使用 Gmail 等常规电子邮件账户来实现此目的。如果你不需要邮件通知，则此项非必需。...

decode-spam-headers

decode-spam-headers.py 无论你是想在日常管理工作中弄清楚某封特定电子邮件为何会进入垃圾邮件/垃圾邮件文件夹，还是为了红队钓鱼模拟的目的，这个脚本都能帮到你！ 这个想法产生于一次针对配备 MS Defender for Office365 的 MS Office365 E5 环境开展商业钓鱼模拟演练的过程中。可以想象，从钓鱼模拟的角度来看，这是一个相当棘手的安全技术栈。 在手动翻阅所有这些 Office365 SMTP 邮件头并试图从中挑选出 SCL 值之后，是时候编写一个像样的 SMTP 邮件头解析器了。 时光荏苒，我不断为越来越多的 SMTP...

CVE-2026-37073

CVE-2026-37073 Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header...

zimbra-cve-2026-73570-ir

Zimbra CVE-2026-73570 Community IR Toolkit Detection-first, evidence-preserving incident-response helpers for Zimbra administrators investigating suspected exploitation of CVE-2026-73570. !CAUTION This is an independent community project, not a vendor compromise oracle. The checker is read-only a...

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

CVE-2026-11113 – SMTP Header Injection in Contact Form Program Code Python root@kitploit: contactformserver.py - Mails feedback without sanitizing headers from flask import Flask, request import smtplib app = Flaskname @app.route'/contact', methods='POST' def contact: sender = request.form'email'...

smtp_userenum

smtpuserenum Help: root@kitploit: python3 smtpuserenum.py -h Usage: root@kitploit: python3 smtpuserenum.py You can change the username list:...

SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

CVE-2003-0264

🐞 CVE-2003-0264: SLMail 5.5 - Stack-Based Buffer Overflow Classic stack-based buffer overflow in SLMail 5.5 showing how early mail servers could be compromised through oversized SMTP and POP3 commands. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context an...

ssl-heartbleed.nse

ssl-heartbleed.nse Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160. This script is now basically the one Patrik Karlsson wrote with some minor changes ported from my own script. Features Includes support for FTP,SMTP,XMPP...

CVE-2025-24000-exploit

CVE-2025-24000 — Post SMTP Privilege Escalation Exploit Overview This script exploits CVE-2025-24000 , a high-severity broken access control vulnerability in the Post SMTP WordPress plugin versions ≤ 3.2.0. It allows any authenticated user with a low-privilege account e.g. Subscriber to access th...

CVE-2026-73570

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom, low-level Python proof-of-concept PoC script for testing SMTP command injection vulnerabilities CVE-2026-73570. This tool sends a malformed RCPT TO address containing shell-style command substitution e.g., $command to determine if the...

-CVE-2026-23829-CTT-Mailpit-phase-reconstruction-

SimoesCTT-mailpit-phase-reconstructor It's a CRLF injection in Mailpit's SMTP server — a classic data corruption vulnerability. But under CTT, it's not just a bug. It's a phase reconstruction opportunity. CVE-2026-23829 root@kitploit: CTT-Mailpit-Phase-Reconstructor CVE-2026-23829 — Proof of Nove...