4081 matches found
CVE-2023-46197
CVE-2023-46197 Supsystic의 팝업 = 1.10.19 - 민감한 정보 노출에 대한 인증 부족 설명 "WordPress용 Supsystic 플러그인의 팝업은 1.10.19까지의 모든 버전에서 getWpCsvList 액션을 통해 민감한 정보 노출에 취약합니다. 이로 인해 구독자 수준 이상의 인증된 공격자가 구독자 이메일 주소를 포함한 민감한 데이터를 추출할 수 있습니다." reference: -...
gitcolombo
Gitcolombo OSINT tool that extracts identities — names, emails, and links between seemingly unrelated accounts — from git repositories and GitHub. Python CLI gitcolombo.py — clones repos, walks git log, and can call the GitHub API for richer signals. Web version gitcolombo.html — a single static...
CVE-2026-97644
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all versions up to, and including, 4.9 The vulnerability exists because the createcontact function in the v3 REST endpoint POST /gh/v3/contacts ...
CVE-2026-97644
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 4.9 . The flaw exists because the create_contact function in the v3 REST endpoint (POST /gh/v3/contacts) is only gated by the add_contacts cap...
WordPress Qubely < 1.8.6 - Unauthenticated Email Sending
Qubely WordPress plugin 1.8.6 contains an insecure deserialization caused by unauthenticated users being able to send arbitrary emails via the qubelysendformdata AJAX action, letting attackers send spam or malicious emails, exploit requires no authentication. id: CVE-2021-24916 info: name:...
Post SMTP <= 3.6.0 - Email Log Disclosure
Post SMTP WordPress plugin = 3.6.0 contains an unauthorized data access vulnerability caused by missing capability check in construct function, letting unauthenticated attackers read arbitrary logged emails, exploit requires no authentication. id: CVE-2025-11833 info: name: Post SMTP = 3.6.0 -...
toutatis
Toutatis 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Toutatis is a tool that allows you to extract information from...
buster
Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...
reconspider
Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...
mosint
Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
mapsdumper
▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installation • Feature • Credits A tool for dumping place details from Goog...
h8mail
h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...
CVE-2026-104414
Ghost versions 2.5.0 before 6.64.0 are susceptible to a stored cross-site scripting (XSS) vulnerability. The root cause is the processing of untrusted scripts through oEmbed photo responses . An attacker can host malicious oEmbed responses which, when embedded, execute scripts in the Ghost editor...
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
pwndb
pwndb 유출된 이메일 검색기. 지원: pwndb2am4tzkvold.onion 설치 필수 조건 sudo apt install tor 설치 git clone https://github.com/jxlil/pwndb.git; cd pwndb virtualenv venv source venv/bin/activate pip3 install -r requirements.txt 사용법 usage: pwndb.py -h -t EMAIL --password -V -o NAMEFILE --tor-proxy TORPROXY -v Leaked...
responsible-disclosure-email-gathering
책임 공개 이메일 수집 목적 호스트에서 취약점을 발견했지만 해당 호스트/조직에 HackerOne 또는 BugCrowd의 활성 프로그램이 없을 수 있습니다. 이런 경우 이 워크플로우가 적합합니다! 대략적으로 웹사이트를 크롤링하여 발견 사항을 제출할 수 있는 보안 관련 이메일을 찾아냅니다. 사전 요구 사항 Katana Nuclei 활성 인터넷 연결 프로세스 이 워크플로우는 다음을 수행합니다: 1. Katana를 사용하여 대상 호스트를 크롤링합니다. 2. Katana의 출력은 Nuclei로 전달되어 파싱됩니다. 3. Nuclei...
CVE-2025-55903
CVE-2025-55903: PerfexCRMにおける保存型HTMLインジェクション ⚠️ セキュリティアドバイザリ 請求書、請求先情報、自動化された通信に影響を与える重大な保存型HTMLインジェクションの脆弱性 -ff6600 📋 概要...
EUVD-2026-90200
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4...