423 matches found
mailchecker
MailChecker 교차 언어 이메일 검증. 55,000개 이상의 폐기 가능한 이메일 도메인 데이터베이스list.txt를 기반으로 합니다. 이메일 형식 검증 내부적으로 validator.js 이메일 정규식과 PHP의 FILTERVALIDATEEMAIL 사용 이메일이 임시 메일yopmail 유형...이 아닌지 검증 list.txt에 직접 데이터셋 추가 가능 이 도구는 사용자에게 연락해야 할 때, 통신 오류를 방지하거나 '스팸박스'를 차단하려는 경우에 매우 유용합니다. 스폰서 France-Nuage 가입 파이프라인을 위한 독립...
buster
Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...
Email_Extract_Gmass.co_Validator
EmailExtractGmass.coValidator Python 2.7 このツールはウェブサイトが遅すぎるため時間がかかります。気長にお待ちください。 寄付: BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...
CVE-2023-7028
はじめに GitLab は広く採用されているウェブベースのリポジトリマネージャーであり、ソフトウェア開発プロジェクトにおけるソースコード管理、統合、保守、コラボレーションのための包括的なプラットフォームを提供します CVE-2023-7028 は、reset password フォームを通じて攻撃者がユーザーアカウントを乗っ取る Account TakeOver ことを可能にする脆弱性です この脆弱性は、以下の バージョン の GitLab に存在します: 16.1 から 16.1.5 16.2 から 16.2.8 16.3 から 16.3.6 16.4 から 16.4.4 16.5 か...
CVE_2019_19844
djangocve201919844poc CVE-2019-19844에 대한 PoC 설정 1. docker-compose run --service-ports web python manage.py migrate --no-input 2. docker-compose run --service-ports web python manage.py createsuperuser [email protected] --username 0xsha 3. localhost:8000/accounts/password-reset로 이동하세요...
Astra Linux – Vulnerability in Python-Django
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are vulnerable to a ReDoS regular expression denial of service attack due to a very large number of domain name labels for emails and URLs...
DEBIAN-CVE-2026-90467
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...
CVE-2026-90467
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...
CVE-2026-90467
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...
PT-2026-90555
Name of the Vulnerable Software and Affected Versions aiosmtplib versions prior to 5.1.3 Description The software fails to properly validate email addresses provided by callers, which enables ESMTP parameter injection into the MAIL FROM and RCPT TO command lines. By crafting malicious addresses...
CVE-2026-81905: Incorrect Authorization
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes email/registration validation, password reset, and persistent login in a single table with a type column, but the redemption path resolves a hash by value alone and does not verify its type. As a result, a hash issued fo...
CVE-2026-81905 Concrete CMS below 9.5.3 does not enforce validation-hash type on redemption, allowing a hash issued for one purpose to be redeemed for another.
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes email/registration validation, password reset, and persistent login in a single table with a type column, but the redemption path resolves a hash by value alone and does not verify its type. As a result, a hash issued fo...
CVE-2026-81905
Concrete CMS versions below 9.5.3 store user validation hashes (email/registration validation, password reset, persistent login) in a single table with a type column, but the redemption path resolves a hash by value alone without verifying its type . This allows a long-lived registration hash (60...
PT-2026-89655
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes email/registration validation, password reset, and persistent login in a single table with a type column, but the redemption path resolves a hash by value alone and does not verify its type. As a result, a hash issued fo...
PT-2026-89656
Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete authentication and receive a session that was fully...
CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...
CVE-2026-86452
MISP versions ≤2.5.45 are affected by a vulnerability in unauthenticated mail endpoints, specifically the forgot password-reset and API-access request paths. The root cause is the absence of input length bounds, format validation, and rate limiting on these anonymous request paths, allowing an at...
CVE-2026-48019
Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound...
CVE-2026-48019 CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay
Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound...
CVE-2026-48019 CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay
Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound...