CVE-2026-82795

SolarView Compact (Contec) contains a cross-site scripting (XSS) vulnerability in its Schedule Settings and Mail Send Setting features. If exploited, the XSS can be leveraged to execute an arbitrary OS command by an attacker who has valid credentials to log into the product. The CVSS v3.1 score i...

EUVD-2026-77251

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

quien

quien Un mejor conjunto de herramientas de whois e inteligencia de dominios. TUI interactiva con vistas en pestañas para WHOIS, DNS, correo, SSL/TLS, cabeceras HTTP, análisis SEO y detección de pila tecnológica. Pruébalo sin instalar: ssh quien.sh Instalación Homebrew root@kitploit: brew install...

Spoof_AnyMail

SpoofAnyMail La herramienta de envío de correos falsos más potente SpoofAnyMail Herramienta indetectable Comandos para ejecutar la herramienta en tu terminal root@kitploit: Note : Tool is Made of Educational Purposes only. Please try not to harm anyone device it's For Fun Purpose Not For Revenge...

ProtOSINT

ProtOSINT ProtOSINT es un script de Python que te ayuda a investigar cuentas de Proton Mail. Versión Esta es la versión 2 de ProtOSINT. La primera versión ha estado disponible durante unos años, pero la API de Proton cambió y las comprobaciones antiguas dejaron de funcionar, por lo que esta es un...

CVE-2025-65318-and-CVE-2025-65319

PoC para CVE-2025-65318 y CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: Al utilizar la funcionalidad de interacción con archivos adjuntos, Canary Mail 5.1.40 y versiones anteriores guarda documentos en un sistema de archivos sin una etiqueta Mark-of-the-Web, lo que permite a los atacantes omitir...

CVE-2020-7247-POC

Prefacio Datos clave sobre el exploit Instalación del servidor vulnerable Configuración Avisos sobre el entorno Exploit Explotación manual Explotación mediante script Prefacio Este repositorio debe servir como base para configurar y explotar CVE-2020-7247 en un entorno controlado y privado. Todo ...

SMTPTester

SMTPTester SMTPTester es una herramienta de python3 para probar servidores SMTP en busca de 3 vulnerabilidades comunes: Spoofing - La capacidad de enviar un correo en nombre de un usuario interno Relay - Usar este servidor SMTP para enviar correos a otras direcciones fuera de la organización...

CVE-2025-68624

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

mailcow-dockerized

mailcow: dockerizado - 🐮 + 🐋 = 💕 ¿Quieres apoyar a mailcow? Por favor, considera un contrato de soporte con Servercow para apoyar el desarrollo continuo. Nosotros te apoyamos a ti mientras tú nos apoyas a nosotros. : También puedes obtener un SAL que es un pago único sin obligaciones ni tarifas...

CVE-2022-27925

Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925...

PT-2026-90993

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...

CVE-2025-68624

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...

EUVD-2025-210903

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server...

CVE-2025-68624

N-able Mail Assure (formerly SolarWinds MSP Mail Assure), a cloud-based multi-tenant SMTP relay, contains a design-level authorization flaw (CWE-290) where an authenticated SMTP user can send outbound mail using MAIL FROM addresses of other tenants . After valid SMTP AUTH, the server accepts arbi...

cve-2022-41352-zimbra-rce

CVE-2022-41352 Zimbra RCE No Autenticado CVE-2022-41352 es una vulnerabilidad de escritura arbitraria de archivos en servidores de correo Zimbra debido al uso de una versión vulnerable de cpio. CVE-2022-41352 NIST.gov CVE-2022-41352 Análisis de Rapid7 Versiones de Zimbra afectadas: Zimbra 9.0.0.p...

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - Exploit CVE-2016-10956 Este script explota la vulnerabilidad CVE-2016-10956 en el plugin Mail Masta 1.0 de WordPress para extraer credenciales de wp-config.php. Cómo usar 1. Clona el repositorio: root@kitploit: git clone...