chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

CVE-2026-92240 Out-of-bounds read in IMAP response parser

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

CVE-2026-92240

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser in Thunderbird by sending an untagged * ID response, causing the application to crash. The affected parsing path is reachable before authentication , broadening the attack surface. The vulnerabili...

EUVD-2026-79244

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

EUVD-2026-79243

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

CVE-2026-92239 Buffer overrun in IMAP

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

CVE-2026-92239

CVE-2026-92239 is a buffer overrun vulnerability in Thunderbird's IMAP handling. A maliciously constructed IMAP line can trigger an out-of-bounds buffer read , potentially exposing sensitive data to an attacker who controls the IMAP response. The issue was fixed in Thunderbird 140.16 . Additional...

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...

IMAPLoginTester

IMAPLoginTester IMAPLoginTester は、多数のメールアドレスとパスワードが書かれたテキストファイルを読み込み、それぞれのIMAPサーバーにログインしてそれらの認証情報が有効かどうかを確認するシンプルなPythonスクリプトです。 使用方法: root@kitploit: usage: imaplogintester.py -h -i INPUT -o OUTPUT -s -t SLEEPTIME -T TIMEOUT -P SOCKS5PROXY -v optional arguments: -h, --help show this help message...

CVE-2018-19518

CVE-2018-19518 最后报告在此：https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF 用法 运行应用 root@kitploit: docker-compose up -d Web 应用的正常使用示例。 imap : webmail.grenoble-inp.org 用户 : [email protected] 密码 : xxx 利用 使用 echo '1234567890'/tmp/test0001。...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

CVE-2026-57130

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/emailtools.py interpolates LLM-controlled fromaddr, subject, and query values directly into quoted IMAP SEARCH criteria. Embedded quote, backslash, newline, or null characters can...

CVE-2026-57130

PraisonAI (praisonaiagents) is a multi-agent framework. Prior to 1.6.59 , the file email_tools.py interpolates LLM-controlled parameters (from_addr, subject, query, search_id) directly into IMAP SEARCH criteria using f-string formatting with double-quote delimiters, with no escaping or sanitizati...

CVE-2026-57130 PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/emailtools.py interpolates LLM-controlled fromaddr, subject, and query values directly into quoted IMAP SEARCH criteria. Embedded quote, backslash, newline, or null characters can...

CVE-2020-1349

CVE-2020-1349 该漏洞存在于安装于韩文 Windows 10 1909 x64（代码页 949）上的 Outlook 2019（16.0.12624.20424）中。 概览 我尚未能利用此漏洞绕过 ASLR，但我编写了一个 Outlook 2019 32 位漏洞利用程序，通过使用启动时固定的系统库地址弹出一个计算器。 此外，该漏洞为零点击漏洞。如果除“outlook.com”账户以外的邮件服务账户通过 IMAP 与 Outlook 2019 关联，则仅通过接收邮件即可触发。 第一个漏洞 root@kitploit: v26 = IsDBCSLeadBytev13; v12 =...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Fixed the uninit-value access to imap allocated in the diMount function. The syzbot reports that hexdumptobuffer uses uninit-value: ===================================================== BUG: KMSAN: uninit-value in...

AlmaLinux 10 : ruby (ALSA-2026:50778)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:50778 advisory. zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF...

SharpGmailC2

SharpGmailC2 Nuestro amigable Gmail actuará como servidor y el implant exfiltrará datos a través de SMTP y leerá comandos del C2 Gmail mediante el protocolo IMAP DISCLAIMER: Este proyecto no funciona contra Windows Defender desde el 29 de noviembre de 2022. Esta herramienta está ahora firmada por...

Linux Distros Unpatched Vulnerability : CVE-2026-61909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to anoth...