CVE-2023-23397

CVE-2023-23397 Una prueba de concepto para CVE-2023-23397 para pruebas de seguridad. Modifique las líneas 11 y 12 con la ruta UNC del atacante y la dirección de correo electrónico objetivo...

EUVD-2026-76774

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

socialscan

socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

PT-2026-89261

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not properly validating a user's identity prior to updating their details like arbitrary user passwords, including...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

Proxylogon-exploit

Proxylogon-exploit exploit de proxylogon - CVE-2021-26857 uso: root@kitploit: python exploit.py...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

CVE-2026-86478

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address...

CVE-2026-86478

JetBrains YouTrack is vulnerable to an improper authentication flaw in the YouTrack Helpdesk component prior to versions 2025.3.161254 and 2026.1.14042 . The vulnerability allows an unauthenticated attacker to perform account takeover by supplying a self-asserted email address, effectively bypass...

CVE-2023-5561-PoC

CVE-2023-5561-PoC WordPress no restringe adecuadamente qué campos de usuario son buscables a través de la API REST, lo que permite a atacantes no autenticados discernir las direcciones de correo electrónico de los usuarios que han publicado entradas públicas en un sitio afectado mediante un ataqu...

WP-CVE-2016-10033

WordPress = 4.6 Vulnerabilidad de Ejecución de Comandos PHPMailer CVE-2016-10033 Información de la Vulnerabilidad WordPress es una plataforma de blogs desarrollada en PHP que permite a los usuarios crear su propio sitio web en servidores con soporte para PHP y bases de datos MySQL. También se pue...

CVE-2018-10949

Script de Enumeración de Usuarios de Zimbra Collaboration CVE-2018-10949 Cómo usar El argumento --host debe ser el nombre de host o la dirección IP de la página raíz de la aplicación web de Zimbra Collaboration, y --userlist una lista de nombres de usuario para verificar contra ella. root@kitploi...

CVE-2026-18480 SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover

The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same account its permission check authorised, allowing users with a subscriber-level account to change another user's email address, including an administrator's, and take over that...

CVE-2025-9049

Nokri – Job Board WordPress Theme (versions up to and including 1.6.4 ) is vulnerable to privilege escalation via account takeover due to a missing capability check on the nokri_account_member_permissions function. An authenticated attacker with Subscriber-level access can create new Subscriber u...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

CVE-2026-76608

Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik 4.7.2 - The onGetEmail endpoint did not perform any access checks...

CVE-2026-76608 Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik 4.7.2 - The onGetEmail endpoint did not perform any access checks...