CVE-2024-37383-exploit

Título del Exploit: Exploit para Roundcube mail server para CVE-2024-37383 XSS Almacenado Google Dork: Autor del Exploit: AmirZargham Página del Proveedor: Roundcube - Free and Open Source Webmail Software Enlace del Software: Releases · roundcube/roundcubemail Versión: Versión del cliente...

Sinister

Sinister root@kitploit: この小さなPythonスクリプトは本当に素晴らしい仕事をしてくれます。 SinisterはWindows/Linux向けのキーロガージェネレーターで、キーログやスクリーンショットをメールで送信し、その他の重要なターゲット情報も一緒に送信します。Python 3で記述されています。 免責事項 :computer: このプロジェクトは良い目的と個人利用のためにのみ作成されました。...

CVE-2024-42009

Roundcube Webmail 1.6.7 向け XSS エクスプロイト CVE-2024-42009 説明 このスクリプトは、Roundcube Webmail バージョン 1.6.7 の格納型 XSS 脆弱性 CVE-2024-42009 を悪用します。悪意のあるペイロードをウェブメールシステムに注入し、トリガーされると被害者の受信箱からメールコンテンツを窃取します。 機能 Python HTTP リスナーを使用して、盗まれたメールコンテンツをキャプチャしデコードします。 連絡先フォームを介して XSS ペイロードを送信します。 キャプチャしたメール本文を抽出して表示します。...

CVE-2024-42009

CVE-2024-42009 PoC: メールキャプチャリスナー & XSSエクスプロイト 概要 この概念実証（PoC）は、CVE-2024-42009のエクスプロイトを示すもので、クロスサイトスクリプティング（XSS）の脆弱性を利用してターゲットのウェブメールアプリケーションからメールを抽出します。攻撃は、メールコンテンツを攻撃者の制御するリスナーに流出させる悪意のあるペイロードを注入します。 特徴 XSS脆弱性を悪用してメールコンテンツをキャプチャします。 HTTPリスナーを使用して流出したメールを受信しデコードします。 ペイロードの注入と流出を自動化します。 必要条件 Python...

SharpExchange

SharpExchange 这个命令行 POC 展示了如何使用 C 与 Microsoft Exchange EWS 交互，表明除了 Powershell 之外，还可以用其他工具实现。 是的，这是一个简单的 POC，用来展示如何做到这一点。它并非 100% 完善。如果你想展示你高超的 l33t C 编码或红队技能，欢迎提交 pull request : 本工具仅供教育目的。请勿用于邪恶或非法用途。 MS 文档：...

CVE-2026-86741

Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can inject markdown image syntax or raw HTML tags pointing to local files or remote URLs, which the mail auto-embed library r...

CVE-2026-16773

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5.9 via the wpbotsendemailtranscriptfree. This makes it possible for unauthenticated attackers to exfiltrate full chat...

PT-2026-65449

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5.9 via the wpbot send email transcript free. This makes it possible for unauthenticated attackers to exfiltrate full...

Linux Distros Unpatched Vulnerability : CVE-2026-58451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server...

Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

MAL-2026-4862 Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

PT-2026-34019

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.213 Description An issue exists in the mailbox connection settings endpoints where the functions connectionIncomingSave and connectionOutgoingSave pass all request data directly to the mailbox fill method withou...

Malicious Package

Overview urql-introspection is a malicious package. This package was recognized as part of the 'PhantomRaven' supply chain campaign, which involves credential-stealing malware. The package impersonates well-known ecosystem plugins to deceive developers into installing it. Malicious Behavior The...

CVE-2026-1280

The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability check on the 'wpfmsendfileinemail' AJAX action in all versions up to, and including, 23.5. This makes it possible for unauthenticated attackers to share arbitrary uploaded files v...

Malicious Package

Overview postmark-mcp is a malicious package. This is an MCP Model Context Protocol server intended to let AI assistants send emails via Postmark and it was reportedly modified to secretly exfiltrate email contents by adding a blind-copy BCC to an external domain. Note: If you have installed or...

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit in Ro...

Exploit for Cross-site Scripting in Roundcube Webmail

XSS Exploit for Roundcube Webmail 1.6.7 CVE-2024-42009 D...

Inside Operation Diplomatic Specter: Chinese APT Group's Stealthy Tactics Exposed

Governmental entities in the Middle East, Africa, and Asia are the target of a Chinese advanced persistent threat APT group as part of an ongoing cyber espionage campaign dubbed Operation Diplomatic Specter since at least late 2022. "An analysis of this threat actor's activity reveals long-term...

Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software

The threat actor known as Winter Vivern has been observed exploiting a zero-day flaw in Roundcube webmail software on October 11, 2023, to harvest email messages from victims' accounts. "Winter Vivern has stepped up its operations by using a zero-day vulnerability in Roundcube," ESET security...

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

Cryptojacking, the illicit use of computing resources to mine cryptocurrency, has become increasingly prevalent in recent years, with attackers building a cybercriminal economy around attack tools, infrastructure, and services to generate revenue from targeting a wide range of vulnerable systems,...