evil-winrar

eval-winrar evil-winrar, marco de explotación de vulnerabilidades CVE-2023-38831 y ataque de ingeniería social evil-winrar, csv-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework Introducción evil-winrar es un marco de explotación de vulnerabilidades y ataque de...

CVE-2024-23724

安装 自动安装（推荐） 为了测试该漏洞，我们需要两个账号：一个具有管理员（所有者）角色的账号，以及一个具有贡献者角色的账号。在 Ghost CMS 中，首先需要访问管理面板来创建所有者账号，然后从该账号邀请一位贡献者，让其创建自己的账号。然而，在 Ghost 中，邀请贡献者的唯一方式是通过电子邮件发送邀请链接，这需要一个邮件投递服务来将邮件发送到贡献者的账号。为了方便起见，我们创建了一个 Mailgun 账号，向 Ghost 添加了一个贡献者，然后在我们所处的状态下创建了一个数据库转储文件。在我们的 Docker Compose 配置中，我们确保在启动 Ghost...

CVE-2023-7028

CVE-2023-7028 在 GitLab CE/EE 中发现了一个问题，影响所有从 16.1 到 16.1.6 之前、16.2 到 16.2.9 之前、16.3 到 16.3.7 之前、16.4 到 16.4.5 之前、16.5 到 16.5.6 之前、16.6 到 16.6.4 之前以及 16.7 到 16.7.2 之前的版本。该问题导致用户账户的密码重置邮件可能被发送到未经验证的电子邮件地址。 PoC 已在 Kali 2023.3 上测试 在 Docker 中安装 GitLab 16.7.0-ee sudo docker pull...

CVE-2026-51788

安全公告：CVE-2026-51788 cleverangeauth v0.1.10 中的拒绝服务（DoS）漏洞 CVE ID： CVE-2026-51788 状态： 已分配 发现日期： 2026-04-27 研究人员： Aykhan Isgandarli 严重性： 高（CVSS v3.1：7.5） CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 受影响产品： cleverangeauth 受影响版本： v0.1.10 CWE： CWE-400（不受控制的资源消耗），CWE-770（无限制的资源分配） 摘要 在...

GitLab - Account Takeover via Password Reset

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...

CVE-2023-23397-POC

CVE-2023-23397-POC CVE-2023-23397の脆弱性の簡単なPoC、ペイロードは電子メールで送信されます。...

CVE-2024-21413

CVE-2024-21413 Microsoft Outlook 远程代码执行漏洞 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u 发件人电子邮件地址 -p 发件人密码 -d 收件人电子邮件地址 -s SMTP 服务器 -i 攻击者的 IP 地址...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook 远程代码执行漏洞 PoC 🚀 使用方法 在使用此脚本之前，请确保您已获得目标系统所有者的适当权限和授权。 先决条件 Python 3.x impacket-smbserver 使用示例 root@kitploit: sudo python3 CVE-2024-21413.py 🛠️ 功能特性 邮件发送：利用 SMTP 发送包含纯文本和 HTML 部分的邮件。 HTML 模板：支持从 Templates 文件夹读取 HTML 模板，并将占位符替换为实际值。 附件：自动创建并附加 exploit.rtf 文件到邮件。...

Cartero

Cartero URL http://section9labs.github.io/Cartero/ 描述 一个功能强大的网络钓鱼框架，带有功能完整的 CLI 界面。该项目的诞生源于多年的实战需求——现有工具始终无法胜任工作。尽管市面上已有许多项目，但我们始终未能找到一个兼具易用性和可定制性的合适解决方案。 Cartero 是一个模块化项目，分为执行独立任务的命令（例如 Mailer、Cloner、Listener、AdminConsole 等）。此外，每个子命令都具有可重复的配置选项，用于配置和自动化你的工作。 例如，如果我们想要克隆 gmail.com，只需执行以下命令即可。shel...

CVE-2026-71393

CVE-2026-71393 affects GNU Emacs for Android. A 32-bit font length value in sfnt_read_name_table() can overflow when computing the allocation size, causing an undersized heap allocation. A crafted TrueType font can trigger a read() past the buffer, leading to heap memory corruption and potential ...

CVE-2026-54217

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a user accesses the email, the stored cross-site scripting is triggered. This issue affects TeamDavid through Rollout 524...

CVE-2026-13156

The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action it verifies the manageoptions capability but ignores the nonce, so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin...

EUVD-2026-45890

The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action it verifies the manageoptions capability but ignores the nonce, so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin...

CVE-2026-50635

LimeSurvey Password Reset Host Header Injection: The system builds password-reset links from the client-supplied Host header without validating it; the default config leaves the allowlist undefined, so LSHttpRequest::checkIsAllowedHost() does nothing. A remote, unauthenticated attacker can reques...

PT-2026-45038

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.10 Description Admidio contains a Cross-Site Request Forgery CSRF flaw in the modules/registration.php endpoint. When the mode parameter is set to send login, the application fails to validate the adm csrf token a...

CVE-2026-25602

Summary: CVE-2026-25602 affects Mesalvo Meona’s Client Launcher and Server components with an insufficient verification of data authenticity. This could enable sending messages to arbitrary email addresses. Affected components and scope: Meona Client Launcher Component (affected up to 19.06.2020 ...

EUVD-2026-31094

Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component:...

CVE-2026-25602

Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component:...

plunk 数据伪造问题漏洞

Plunk is an open-source email sending and management platform developed by Plunk. Versions of Plunk prior to 0.9.0 contained a data manipulation vulnerability. This vulnerability stems from the /webhooks/sns endpoint accepting Amazon SNS notification payloads without verifying the SNS signature,...

PT-2026-37296

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description An issue exists in the 'objects/sendEmail.json.php' endpoint where the absence of the contactForm parameter allows unauthenticated users to send emails to arbitrary recipients. When this parameter is...