CVE-2024-21413

CVE-2024-21413 Este script de Python se utiliza para explotar la CVE-2024-21413 acuñada "MonikerLink" Sala de TryHackMe: MonikerLink Supuestos Este PoC ha sido creado para un entorno de laboratorio, lo que significa que el servidor debe configurarse de una manera específica es decir, la...

HTB-Mailing-A-Complete-Walkthrough

HTB: Mailing — Una guía completa Por Mursalin Si has estado machacando máquinas de HackTheBox, Mailing es una de esas cajas que realmente te enseña algo. Está clasificada como Fácil, corre en Windows, y encadena varias vulnerabilidades del mundo real: un directory traversal, una filtración de...

CVE-2024-21413

CVE-2024-21413 该 Python 脚本用于利用 CVE-2024-21413，该漏洞被称为 "MonikerLink"。 TryHackMe 房间：MonikerLink 假设 此 PoC 专为实验室环境创建，这意味着服务器需要以特定设置进行配置（例如，为方便起见不支持 TLS 认证）。该漏洞本身是真实存在的，但此处仅作为训练环境使用。由于这是针对特定实验室环境，代码尽可能保持简单以面向特定受众，因此我不会为此添加新功能。如果你在寻找“更完善”的 PoC，建议查看 Xaitax 的版本。 PR / 贡献 基于上述原因，我大概率不会接受 PR。欢迎你 fork...

EUVD-2008-3662

Malware in sbrugna...

EUVD-2013-5411

Malware in sbrugna...

EUVD-2025-22113

Malicious code in bioql PyPI...

EUVD-2025-22112

Malicious code in bioql PyPI...

EUVD-2025-22115

Malicious code in bioql PyPI...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52374

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52372

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components. A local attacker can access sensitive information by reading these files to obtain an administrator password and running it...

Use of Hard-coded Cryptographic Key

Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key via the use of hardcoded cryptographic key in Encryption.cs. A local attacker can obtain decrypted credentials to other servers from hMailAdmin.exe.config file and access other hMailServer admin...

CVE-2025-52374

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52372

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52372

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

CVE-2025-52372

CVE-2025-52372 affects hMailServer v5.8.6. The issue allows a local attacker to obtain sensitive information via the files hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini. The provided documents do not specify the root cause beyond the files involved, nor a remediation o...

PT-2025-30302 · Unknown · Hmailserver

Name of the Vulnerable Software and Affected Versions: hMailServer versions 5.6.9-beta through 5.8.6 Description: The software uses a hardcoded cryptographic key in the Encryption.cs file. This allows an attacker to decrypt passwords for other servers stored in the hMailAdmin.exe.config file,...