CVE-2020-7247-POC

Foreword Key facts about the exploit Installing the vulnerable server Configuration Environment disclaimers Exploit Manual Exploitation Scripted Exploitation Foreword This repository should serve as a base to set up and exploit CVE-2020-7247 in a controlled and private environment. All of the...

nmap-nse-vulnerability-scripts

NMAP vulnerability scanning scripts A collection of nmap vulnerability scanning scripts to aid afforable detection and remediation. Background These scripts use the Nmap Scripting Engine NSE to implement checks for various vulnerabilities. References: https://nmap.org/book/man-nse.html...

CVE-2026-33454

camel-mail Header Injection → RCE Vulnerability Reproducer CVE-2026-33454 This project demonstrates a Camel message header injection vulnerability in Apache Camel's camel-mail component, tracked as CVE-2026-33454. An attacker who can deliver an email to a mailbox monitored by a Camel mail consume...

CVE-2020-0688

python3 CVE-2020-0688.py mail.chinabaiker.com [email protected] password command...

RaidenMAILD Mail Server v.4.9.4 - Path Traversal

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component. id: CVE-2024-32399 info: name: RaidenMAILD Mail Server v.4.9.4 - Path Traversal author: DhiyaneshDK severity: high description: |...

SMTPTester

SMTPTester SMTPTester es una herramienta de python3 para probar servidores SMTP en busca de 3 vulnerabilidades comunes: Spoofing - La capacidad de enviar un correo en nombre de un usuario interno Relay - Usar este servidor SMTP para enviar correos a otras direcciones fuera de la organización...

wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit This script exploits the CVE-2016-10956 vulnerability in WordPress Plugin Mail Masta 1.0 to extract credentials from wp-config.php. How to Use 1. Clone the repository: root@kitploit: git clone...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Buffer Overflow in Seattle Lab Mail SLmail 5.5 - POP3 Simple STACK BAsed BUffer Overflow Step By Step 1 FUZZ The Application In the very First Step we will Fuzz The Application With a Simple Spike Script meanwhile we wil also have SLmail attachedand running to immunity Debugg...

CVE-2024-37383-exploit

Exploit Title: Roundcube mail server exploit for CVE-2024-37383 Stored XSS Google Dork: Exploit Author: AmirZargham Vendor Homepage: Roundcube - Free and Open Source Webmail Software Software Link: Releases · roundcube/roundcubemail Version: Roundcube client version earlier than 1.5.6 or from 1.6...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

gOSINT

gOSINT Codacy Badge Navaja suiza OSINT en Go Echa un vistazo a la rama develop para más actualizaciones. Introducción gOSINT es una navaja suiza OSINT multiplataforma en Golang. Si quieres, siéntete libre de contribuir y/o dejar comentarios. ¿Te gusta mi proyecto? ¡Por favor considera donar : Lo...

ruler

Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...

CVE-2021-26855-CVE-2021-27065

CVE-2021-26855-CVE-2021-27065 analytics ProxyLogo Mail exchange RCE...

cve-2022-41352-zimbra-rce

CVE-2022-41352 Zimbra बिना प्रमाणीकरण वाला RCE CVE-2022-41352, Zimbra मेल सर्वर में एक भेद्य cpio संस्करण के उपयोग के कारण उत्पन्न होने वाली एक मनमानी फ़ाइल लेखन भेद्यता है। CVE-2022-41352 NIST.gov CVE-2022-41352 Rapid7 विश्लेषण प्रभावितZimbra संस्करण: Zimbra 9.0.0.p27 Zimbra 8.8.15.p34 अधिक विवर...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Ejecución Remota de Código PHPMailer es la clase de transporte más popular del mundo, con aproximadamente 9 millones de usuarios en todo el mundo. Las descargas continúan a un ritmo significativo a diario. Utilizado por muchos proyectos de código abierto: WordPress, Drupal, 1CRM,...

CVE-2024-32399

CVE-2024-32399 Vulnerability Overview Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component Vulnerability Type Directory Traversal Vendor of Product RaidenMAILD Mail Server Affected...

CVE-2022-4556

CVE-2022-4556 - Stored XSS in SOGo Webmail v5.7.1 🧠 Summary A Stored Cross-Site Scripting XSS vulnerability was discovered in the fullName field of the Identity Preferences section in the SOGo web interface , affecting version 5.7.1. An authenticated attacker could inject a malicious script that...

CVE-2016-010033-010045

CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...

CVE-2025-63499

XSS Reflejado Dirigido en el parámetro theme Investigadores: Arseniy Poblaguev, Daniil Khomichenok Versiones afectadas = 5.12.4 https://github.com/Alinto/sogo/releases/tag/SOGo-5.12.4 Fecha: 02.12.2025 En el parámetro theme existe una vulnerabilidad de XSS Reflejado:...

CVE-2026-80439

The Redirection for Contact Form 7 WordPress plugin (versions 2.2.7 through 3.2.10 ) allows unauthenticated users to execute arbitrary shortcodes registered on the site. The root cause is that shortcodes contained in submitted form values are not sanitized before being substituted into an action'...