socialscan

socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

Proxylogon-exploit

Proxylogon-exploit proxylogon 익스플로잇 - CVE-2021-26857 사용법: python exploit.py...

CVE-2026-103646

The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the looku...

CLEANSTART-2026-JP32193 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

CVE-2026-27137 affects multiple packages. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint wil...

CVE-2026-97331

The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document being operated on before returning that user's email address, allowing any authenticated user, such as a Subscriber, to obtain the email address of any registered account, including...

CVE-2026-97331 User Private Files < 2.1.9 - Subscriber+ User Email Address Disclosure via dpk_upvf_rmv_access

The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document being operated on before returning that user's email address, allowing any authenticated user, such as a Subscriber, to obtain the email address of any registered account, including...

EUVD-2026-94191

The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document being operated on before returning that user's email address, allowing any authenticated user, such as a Subscriber, to obtain the email address of any registered account, including...

CVE-2026-97331

The User Private Files WordPress plugin, in versions before 2.1.9 , is vulnerable to a subscriber-level user email address disclosure. The flaw exists because the plugin fails to validate that a supplied user actually belongs to the document being operated on before returning that user's email ad...

CVE-2026-97331 User Private Files < 2.1.9 - Subscriber+ User Email Address Disclosure via dpk_upvf_rmv_access

The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document being operated on before returning that user's email address, allowing any authenticated user, such as a Subscriber, to obtain the email address of any registered account, including...

WordPress User Private Files plugin < 2.1.9 - Subscriber+ User Email Address Disclosure vulnerability

Subscriber+ User Email Address Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin User Private Files versions 2.1.9...

CLEANSTART-2026-HI32575 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

Security vulnerability affects the temporal-server package. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the...

CLEANSTART-2026-OD21402 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

Security vulnerability affects the temporal-server package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...

CVE-2023-5561-PoC

CVE-2023-5561-PoC WordPress는 REST API를 통해 검색 가능한 사용자 필드를 적절히 제한하지 않아, 인증되지 않은 공격자가 Oracle 스타일 공격을 통해 영향받은 웹사이트에 공개 게시물을 작성한 사용자의 이메일 주소를 알아낼 수 있습니다. 출처: https://wpscan.com/vulnerability/19380917-4c27-4095-abf1-eba6f913b441/...

CVE-2023-23397

CVE-2023-23397 보안 테스트를 위한 CVE-2023-23397 개념 증명. 11행과 12행을 공격자 UNC 경로와 대상 이메일 주소로 수정하십시오...

PT-2026-106030

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/v1/workspaces/slug/projects/project id/members/ returns the complete project-member roster, including each member's email address, first and last name, display name, avatar, and role. ProjectMemberPermission gates the...

WP-CVE-2016-10033

WordPress -p 8000:80 앞의 8000은 호스트 머신의 포트를 나타내며 임의로 지정할 수 있습니다. http://127.0.0.1:8000에 접속하여 WordPress 메인 화면이 보이면 시작 성공입니다. POC 대상 주소가 http://127.0.0.1:8000/ 인 경우: 1. 아래 HTTP 요청을 BurpSuite Repeater에 복사하고 Go 버튼을 클릭한 후 대상 IP와 포트를 입력합니다 예: IP: 127.0.0.1, 포트: 80 POST /wp-login.php?action=lostpassword...

CVE-2018-10949

Zimbra Collaboration 사용자 열거 스크립트 CVE-2018-10949 사용 방법 --host 인자는 Zimbra Collaboration 웹 애플리케이션 루트 페이지의 호스트명 또는 IP 주소여야 하며, --userlist는 확인할 사용자 이름 목록입니다. root@kali ./cve-2018-10949-user-enum.py --host http://mail.target.com --userlist /tmp/emails.txt 그러면 유효한 이메일이 출력됩니다! 참고 자료:...

EUVD-2026-91949

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code...

CVE-2026-96962

The Pie Register WordPress plugin (versions prior to 3.8.4.14 ) contains a vulnerability where it fails to restrict access to an invitation-code report . This flaw allows unauthenticated visitors to obtain the usernames and email addresses of all users who registered using a specific, known invit...