gOSINT

gOSINT Codacy Badge OSINT Swiss Army Knife in Go Take a look at the develop branch for more updates. Introduction gOSINT is a multiplatform OSINT Swiss army knife in Golang. If you want, feel free to contribute and/or leave a feedback! Like my project? Please consider donation : What gOSINT can d...

Silent_CVE_2019_16394

CVE-2019-16394 A simple POC python script of CVE-2019-16394 Script is adjusted for a french website, you may need to modify it if the website language is different. Install pip install -r requirements.txt Usage usage: cve201916394.py -h -u URL -f FILE -v optional arguments: -h, --help show this...

Fix-Apple-Mail-CVE-2020-9922

Fix-Apple-Mail-CVE-2020-9922 Apple Mail has a scary zero-click vulnerability. Versions of OS X prior to High Sierra were not patched. https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c I made this quickly and only tested it on Mavericks. I don't see any...

CVE-2016-10956-mail-masta

Mail Masta - Local File Read CVE-2016-10956 The mail-masta plugin 1.0 for WordPress has local file read in countofsend.php and csvexport.php. Usage $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETURL -f FILE | -F...

CVE-2022-4556

CVE-2022-4556 - Stored XSS in SOGo Webmail v5.7.1 🧠 Summary A Stored Cross-Site Scripting XSS vulnerability was discovered in the fullName field of the Identity Preferences section in the SOGo web interface , affecting version 5.7.1. An authenticated attacker could inject a malicious script that...

CVE-2024-32399

CVE-2024-32399 Vulnerability Overview Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component Vulnerability Type Directory Traversal Vendor of Product RaidenMAILD Mail Server Affected...

CVE-2023-0860

CVE-2023-0860 Brute Force on Modoboa Mail Hosting and Management application v2.0.3 Open-source Mail Hosting and Management application, Modoboa = v2.0.3, does not restrict unauthenticated login attempts allowing for brute force attacks at the login page. https://vulners.com/cve/CVE-2023-0860...

CVE-2024-28589

CVE-2024-28589 A vulnerability has been discovered in Axigen Mail Server for Windows, affecting all versions up to 10.5.18, which allows for local privilege escalation. Description: The Axigen Mail Server was found to be vulnerable to a local privilege escalation due to insecure DLL loading from ...

CVE-2016-010033-010045

CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 This repository contains a proof-of-concept exploit for CVE-2024-50526, an unauthenticated arbitrary file upload vulnerability in the Multi Purpose Mail Form WordPress plugin,...

CVE-2025-47176

CVE-2025-47176 PoC Browser Bridge Description This proof-of-concept PoC demonstrates the CVE-2025-47176 vulnerability simulation. It injects a crafted mail item into Outlook containing a malicious sync path that triggers an action during scanning. IMPORTANT: This PoC simulates the vulnerable...

asf__james-project_CVE-2022-22931_3-6-0

Apache James Project :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgJoin the chat at...

CVE-2022-27925

Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925...

wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit This script exploits the CVE-2016-10956 vulnerability in WordPress Plugin Mail Masta 1.0 to extract credentials from wp-config.php. How to Use 1. Clone the repository: git clone https://github.com/Hakchoven/wp-mail-masta-exploit.git 2...

GHSA-85X2-Q946-CP5H Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

Vulnerability summary addressparser ends an angle-addr at the first it sees, including one inside a quoted local part, a comment or a domain literal. The domain is then read off the text in front of that . "@good.com is the mailbox "[email protected]"@good.com under RFC 5322, and Nodemailer read it as a...

Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name

Vulnerability summary addressparser ends an angle-addr at the first it sees, including one inside a quoted local part, a comment or a domain literal. The domain is then read off the text in front of that . "@good.com is the mailbox "[email protected]"@good.com under RFC 5322, and Nodemailer read it as a...

CVE-2026-83813

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host...

CVE-2026-83813 Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host...

EUVD-2026-109152

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host...

CVE-2026-83813

The Twisted framework (Python 3.6+) contains a DNS Response Spoofing vulnerability in twisted.names.dns.DNSDatagramProtocol prior to version 26.10.0rc1 . The root cause is a missing source address validation , where the component accepts a UDP DNS response if the 16-bit transaction ID matches, wi...