CVE-2026-1661

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

CVE-2026-1661 WP Mail Logging < 1.17.0 - Unauthenticated HTML Injection

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

EUVD-2026-91208

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

CVE-2026-1661

The WP Mail Logging WordPress plugin, in versions prior to 1.17.0 , is vulnerable to HTML injection because it fails to properly restrict the HTML and CSS of logged emails before rendering them in admin log screens. This allows unauthenticated users to inject styled content and links—for instance...

CVE-2026-1661 WP Mail Logging < 1.17.0 - Unauthenticated HTML Injection

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

CVE-2026-84753

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-84753 CVE-2026-84753 Mail Mint 1.31.0 - WPFunnels I am @abraxasnull. Loopback lab. The client is CVE-2026-84753-Abraxas-Labs.py. The function is named safe. Unauthenticated REST mint-form-submit copies extra...

Belati

Belati Belati - OSINT를 위한 전통적인 스위스 아미 나이프 Belati는 OSINT 목적으로 웹사이트 및 기타 서비스에서 공개 데이터와 공개 문서를 수집하는 도구입니다. 이 도구는 Foca와 Datasploit에서 영감을 받았습니다 : 현재 버전 v0.2.4 Belati 작동 모습 만든 이유는? 그냥 배움과 OSINT 목적입니다. 잘못된 점이 있으면 알려주세요. Belati가 할 수 있는 일 대화형 명령줄 셸 Whois인도네시아 TLD 지원 배너 그래빙 서브도메인 열거 모든 서브도메인 머신에 대한 서비스 스캐닝...

CVE-2003-0264

🐞 CVE-2003-0264: SLMail 5.5 - スタックベースのバッファオーバーフロー SLMail 5.5 における古典的なスタックベースのバッファオーバーフロー。過剰なサイズの SMTP および POP3 コマンドにより、初期のメールサーバーがどのように侵害され得るかを示します。 📑 目次 このリポジトリが存在する理由 この脆弱性が興味深い理由 背景と影響を受けるソフトウェア 脆弱性について クラッシュの誘発 悪用 🎓 このリポジトリが存在する理由...

CVE-2026-104465: Improper Neutralization of Input During Web Page Generation

YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the field parameter of the mail handler. Attackers can craft links whose field value breaks out of the ajax-mail-form action attribute to execute JavaScript in...

PT-2026-104103

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

PT-2026-104180

Name of the Vulnerable Software and Affected Versions WPMobile.App – Android and iOS App Builder versions prior to 11.83 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attacker...

CVE-2026-94541: Missing Authorization

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attacke...

PT-2026-104275

YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the field parameter of the mail handler. Attackers can craft links whose field value breaks out of the ajax-mail-form action attribute to execute JavaScript in...

CVE-2026-104446: Missing Authentication for Critical Function

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...

CVE-2026-1661: Improper Neutralization of Input During Web Page Generation

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-클릭 RCE 익스플로잇 작성자: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 이 저장소는 CVE-2024-50526에 대한 개념 증명 익스플로잇을 포함합니다. CVE-2024-50526은 Multi Purpose Mail Form WordPress 플러그인의 인증되지 않은 임의 파일 업로드 취약점으로, 원격 명령 실행RCE으로 이어집니다. 스크립트 기능 이 스크립트는 인증 없이 취약한 양식 엔드포인트를 통해 P...

CVE-2025-26794-exploit

CVE-2025-26794: Exim ETRN SQL 인젝션 익스플로잇 CVE-2025-26794에 대한 개념 증명PoC 익스플로잇 도구로, SQLite DBM 스토리지를 사용할 때 ETRN 명령을 통해 Exim 4.98 메일 서버의 SQL 인젝션 취약점을 시연합니다. ⚠️ 법적 고지 승인된 보안 테스트 전용 이 도구는 교육 목적 및 승인된 침투 테스트용으로만 제공됩니다. 컴퓨터 시스템에 대한 무단 접근은 다음을 포함한 다양한 법률에 따라 불법입니다: 미국의 컴퓨터 사기 및 남용 법안CFAA 영국의 컴퓨터 남용 법안Compute...

CLEANSTART-2024-EW88000 emacsclient-mail

Security vulnerability affects the emacs package. emacsclient-mail...

CLEANSTART-2026-VN01735 In Jakarta Mail versions prior to 2

Security vulnerability affects the apache-nifi package. In Jakarta Mail versions prior to 2...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2026_70642)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202670642 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client...