poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

Proxylogon-exploit

Proxylogon-exploit proxylogon exploit - CVE-2021-26857 usage: python exploit.py...

CVE-2023-5561-PoC

CVE-2023-5561-PoC WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack Source:...

socialscan

socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...

WP-CVE-2016-10033

WordPress The 8000 before the colon represents the host machine's port; it can be set arbitrarily. Visit http://127.0.0.1:8000 and see the WordPress main interface to indicate a successful start POC Assuming the target address is: http://127.0.0.1:8000/ 1. Copy the following HTTP request into...

CVE-2023-23397

CVE-2023-23397 A proof of concept for CVE-2023-23397 for security testing. Modify lines 11 and 12 with the attacker UNC path and target email address...

CVE-2018-10949

Zimbra Collaboration User Enumeration Script CVE-2018-10949 How to use The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it. root@kali ./cve-2018-10949-user-enum.py --host...

CVE-2026-92797

The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the saveprofilefields function that uses an isset condition at line 1119, allowing the security check to be completely...

CLEANSTART-2026-QK41185 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

CVE-2026-42499 affects multiple packages. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. See references for individual vulnerability details...

CLEANSTART-2026-EL50504 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

CVE-2026-27137 affects multiple packages. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint wil...

PT-2026-120885

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.2 through 19.3.5 GitLab CE/EE versions 19.4 through 19.4.2 GitLab CE/EE versions 19.5 through 19.5.0 Description Insufficient scope enforcement on a GraphQL field allows an authenticated user possessing a read api-scop...

WordPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration vulnerability

Missing Authorization to Authenticated Subscriber+ Email Address Enumeration vulnerability discovered by Kuba in WordPress Plugin LearnPress versions = 4.4.10...

EUVD-2026-103255

The PeachPay — Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net, NMI WordPress plugin before 1.120.70 does not perform any capability or ownership check before returning an order's secret key in response to an unauthenticated request, allowing anyone to...

CVE-2026-107744 LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...

CVE-2026-107744

The LearnPress – WordPress LMS Plugin is vulnerable to an authorization bypass in all versions up to and including 4.4.10 . The flaw occurs because the plugin fails to properly verify user permissions during the 'search-authors' AJAX action . This allows authenticated attackers with subscriber-le...

CVE-2026-107744 LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...

PT-2026-115492

Name of the Vulnerable Software and Affected Versions WP Mail Logging versions prior to 1.17.1 Description The plugin is subject to sensitive information exposure through the email address parameter. Authenticated attackers with administrator-level access can extract logged mail rows of other...

Syed Balkhi WP Mail Logging Information Leak Vulnerability

Syed Balkhi WP Mail Logging 1.17.0 and earlier versions have a vulnerability that leads to information leakage. This vulnerability stems from improper handling of the email address parameter. Attackers who are authenticated and have administrator or higher privileges can extract complete email...

CLEANSTART-2026-IM42663 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

CVE-2026-42499 affects multiple packages. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. See references for individual vulnerability details...

CLEANSTART-2026-IO14579 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

Security vulnerability affects the temporal-server-fips package. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only...