CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover

🎯 CTT-Mailpit-Exploit：完美 11/10 分零点击蠕虫 利用收敛时间理论（Convergent Time Theory），将基础的 SMTP 头注入漏洞（CVE-2026-23829）转化为一个满分、自传播的 RCE 蠕虫。 📊 分数转化：6.1 → 11.0/10 ⭐...

📄 Mailpit SMTP CRLF Injection

A CRLF injection vulnerability exists in Mailpit's SMTP server versions prior to 1.28.3. The vulnerability allows attackers to inject arbitrary SMTP headers by including carriage return characters in email addresses due to insufficient regex validation. Mailpit - SMTP CRLF Injection via Regex...

CVE-2026-23829

creationtimestamp| type| source ---|---|--- 2026-01-17 22:52:44+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-54wq-72mp-cq7c 2026-01-19 03:33:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcqpi3fi7b2y 2026-01-20 20:10:26+00:00|...