Lucene search
+L

423 matches found

Kitploit
Kitploit
•added 2026/10/03 2:08 p.m.•14 views

mailchecker

MailChecker 교차 언어 이메일 검증. 55,000개 이상의 폐기 가능한 이메일 도메인 데이터베이스list.txt를 기반으로 합니다. 이메일 형식 검증 내부적으로 validator.js 이메일 정규식과 PHP의 FILTERVALIDATEEMAIL 사용 이메일이 임시 메일yopmail 유형...이 아닌지 검증 list.txt에 직접 데이터셋 추가 가능 이 도구는 사용자에게 연락해야 할 때, 통신 오류를 방지하거나 '스팸박스'를 차단하려는 경우에 매우 유용합니다. 스폰서 France-Nuage 가입 파이프라인을 위한 독립...

6.3AI score
SaveExploits0References11
Kitploit
Kitploit
•added 2026/10/02 11:08 p.m.•146 views

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/01 10:42 p.m.•11 views

Email_Extract_Gmass.co_Validator

EmailExtractGmass.coValidator Python 2.7 このツールはウェブサイトが遅すぎるため時間がかかります。気長にお待ちください。 寄付: BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/01 6:28 p.m.•11 views

CVE-2023-7028

はじめに GitLab は広く採用されているウェブベースのリポジトリマネージャーであり、ソフトウェア開発プロジェクトにおけるソースコード管理、統合、保守、コラボレーションのための包括的なプラットフォームを提供します CVE-2023-7028 は、reset password フォームを通じて攻撃者がユーザーアカウントを乗っ取る Account TakeOver ことを可能にする脆弱性です この脆弱性は、以下の バージョン の GitLab に存在します: 16.1 から 16.1.5 16.2 から 16.2.8 16.3 から 16.3.6 16.4 から 16.4.4 16.5 か...

10CVSS8.2AI score0.94647EPSS
SaveExploits16References1
Kitploit
Kitploit
•added 2026/09/28 2:40 p.m.•9 views

CVE_2019_19844

djangocve201919844poc CVE-2019-19844에 대한 PoC 설정 1. docker-compose run --service-ports web python manage.py migrate --no-input 2. docker-compose run --service-ports web python manage.py createsuperuser [email protected] --username 0xsha 3. localhost:8000/accounts/password-reset로 이동하세요...

9.8CVSS6.9AI score0.53561EPSS
SaveExploits7
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•14 views

Astra Linux – Vulnerability in Python-Django

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are vulnerable to a ReDoS regular expression denial of service attack due to a very large number of domain name labels for emails and URLs...

7.5CVSS7.2AI score0.02978EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/12 2:16 a.m.•12 views

DEBIAN-CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

6.3CVSS5.7AI score0.00393EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/12 2:16 a.m.•26 views

CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

6.3CVSS5.7AI score0.00393EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/09/12 1:50 a.m.•27 views

CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

6.3CVSS5.9AI score0.00393EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/12 12:00 a.m.•23 views

PT-2026-90555

Name of the Vulnerable Software and Affected Versions aiosmtplib versions prior to 5.1.3 Description The software fails to properly validate email addresses provided by callers, which enables ESMTP parameter injection into the MAIL FROM and RCPT TO command lines. By crafting malicious addresses...

6.3CVSS5.8AI score0.00393EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•3 views

CVE-2026-81905: Incorrect Authorization

Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes email/registration validation, password reset, and persistent login in a single table with a type column, but the redemption path resolves a hash by value alone and does not verify its type. As a result, a hash issued fo...

6.3CVSS5.9AI score0.00356EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/10 11:16 p.m.•45 views

CVE-2026-81905 Concrete CMS below 9.5.3 does not enforce validation-hash type on redemption, allowing a hash issued for one purpose to be redeemed for another.

Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes email/registration validation, password reset, and persistent login in a single table with a type column, but the redemption path resolves a hash by value alone and does not verify its type. As a result, a hash issued fo...

6.3CVSS0.00356EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/10 11:16 p.m.•32 views

CVE-2026-81905

Concrete CMS versions below 9.5.3 store user validation hashes (email/registration validation, password reset, persistent login) in a single table with a type column, but the redemption path resolves a hash by value alone without verifying its type . This allows a long-lived registration hash (60...

6.3CVSS5.8AI score0.00356EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•17 views

PT-2026-89655

Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes email/registration validation, password reset, and persistent login in a single table with a type column, but the redemption path resolves a hash by value alone and does not verify its type. As a result, a hash issued fo...

6.3CVSS5.8AI score0.00356EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•17 views

PT-2026-89656

Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete authentication and receive a session that was fully...

6.3CVSS5.8AI score0.00617EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/07 1:03 p.m.•38 views

CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...

8.7CVSS0.00542EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 1:03 p.m.•30 views

CVE-2026-86452

MISP versions ≤2.5.45 are affected by a vulnerability in unauthenticated mail endpoints, specifically the forgot password-reset and API-access request paths. The root cause is the absence of input length bounds, format validation, and rate limiting on these anonymous request paths, allowing an at...

8.7CVSS5.8AI score0.00542EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/04 11:17 p.m.•11 views

CVE-2026-48019

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound...

8.9CVSS0.00511EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/04 10:11 p.m.•9 views

CVE-2026-48019 CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound...

8.9CVSS5.7AI score0.00511EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/04 10:11 p.m.•42 views

CVE-2026-48019 CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound...

8.9CVSS0.00511EPSS
SaveExploits0References6
Rows per page
Query Builder