Lucene search
+L

62 matches found

Kitploit
Kitploit
•added 2026/10/11 5:50 a.m.•24 views

flanker

Flanker - Python용 이메일 주소 및 MIME 파싱 .. image:: https://travis-ci.org/mailgun/flanker.svg?branch=master :target: https://travis-ci.org/mailgun/flanker .. image:: https://coveralls.io/repos/github/mailgun/flanker/badge.svg?branch=master :target:...

6AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/11 4:02 a.m.•16 views

inboxkitten

شعار inboxkitten بريد إلكتروني مؤقت مفتوح المصدر - تقدمه قطط بلا خوادم Inboxkitten هو خدمة بريد إلكتروني مؤقت مفتوحة المصدر يمكنك نشرها واعتمادها بحرية بنفسك! زر موقعنا لتجربتها، أو ... دليل نشر Docker إنها سطر واحد بسيط - لاستخدام حاوية docker المُعدة مسبقًا. ملاحظة: ستحتاج إلى إعداد حساب mailgu...

6.3AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/10 11:41 a.m.•21 views

mx-takeover

mx-takeover كيف يعمل • الميزات • التثبيت • الاستخدام • تشغيل mx-takeover mx-takeover يركز على سجلات DNS MX ويكتشف سجلات MX غير المهيأة بشكل صحيح. يدعم حالياً ثلاث تقنيات. وهي: مجالات MX التي ستنتهي صلاحيتها قريباً مجالات MX غير المسجلة المجالات التي تشير إلى خدمة غير مستخدمة حالياً من Mailgun. كي...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/10 6:16 a.m.•307 views

mole

Mole A framework for identifying and exploiting out-of-band OOB vulnerabilities. Installation & Setup Mole Install Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in...

5.9AI score
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2026/08/28 12:00 a.m.•51 views

VulnCheck KEV: CVE-2026-78003

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

9.8CVSS5.7AI score0.00791EPSS
SaveIn wildExploits0References2
Patchstack
Patchstack
•added 2026/08/25 6:57 p.m.•13 views

WordPress Mailgun for WordPress plugin <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) vulnerability

Unauthenticated Server-Side Request Forgery SSRF vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Plugin Mailgun for WordPress versions = 2.2.0...

9.8CVSS5.2AI score0.00791EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/08/22 9:16 a.m.•38 views

CVE-2026-78003

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

9.8CVSS0.00791EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/08/22 8:26 a.m.•53 views

CVE-2026-78003 Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

9.8CVSS0.00791EPSS
SaveExploits0References9
CVE
CVE
•added 2026/08/22 8:26 a.m.•102 views

CVE-2026-78003

The Mailgun for WordPress plugin for WordPress (versions up to and including 2.2.0 ) is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) via path traversal. The root cause is insufficient input validation in the add_list() function, which accepts user-controlled array keys from...

9.8CVSS5.7AI score0.00791EPSS
SaveIn wildExploits0References9
EUVD
EUVD
•added 2026/08/22 8:26 a.m.•21 views

EUVD-2026-64242

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

9.8CVSS5.3AI score0.00791EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/08/22 8:26 a.m.•36 views

CVE-2026-78003 Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

9.8CVSS5.7AI score0.00791EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/08/22 12:00 a.m.•35 views

PT-2026-79525

Name of the Vulnerable Software and Affected Versions Mailgun for WordPress versions prior to 2.2.1 Description Insufficient input validation in the add list function allows unauthenticated attackers to perform Server-Side Request Forgery SSRF via path traversal. The issue occurs because the...

9.8CVSS6.1AI score0.00791EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/22 12:00 a.m.•5 views

CVE-2026-78003: Server-Side Request Forgery (SSRF)

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

9.8CVSS5.6AI score0.00791EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/31 7:16 a.m.•25 views

CVE-2026-14834

The Mailgun for WordPress plugin before 2.2.1 does not perform any capability or nonce check on an unauthenticated AJAX action that adds subscribers to the site owner's configured email service mailing lists, allowing unauthenticated attackers to enrol arbitrary email addresses into those lists...

6.5CVSS0.00275EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/31 6:00 a.m.•15 views

CVE-2026-14834

The Mailgun for WordPress plugin before 2.2.1 does not perform any capability or nonce check on an unauthenticated AJAX action that adds subscribers to the site owner's configured email service mailing lists, allowing unauthenticated attackers to enrol arbitrary email addresses into those lists...

5.5AI score0.00275EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/07/31 6:00 a.m.•20 views

WordPress Mailgun for WordPress plugin < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription vulnerability

Unauthenticated Arbitrary Mailgun List Subscription vulnerability discovered by Pedro Pinho in WordPress Plugin Mailgun for WordPress versions 2.2.1...

6.5CVSS5.5AI score0.00275EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/07/31 6:00 a.m.•57 views

CVE-2026-14834

The Mailgun for WordPress plugin (versions before 2.2.1 ) contains a vulnerability where it fails to perform capability or nonce checks on an unauthenticated AJAX action. This flaw allows unauthenticated attackers to enroll arbitrary email addresses into the site owner's configured email service ...

6.5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/31 6:00 a.m.•17 views

CVE-2026-14834 Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX

The Mailgun for WordPress plugin before 2.2.1 does not perform any capability or nonce check on an unauthenticated AJAX action that adds subscribers to the site owner's configured email service mailing lists, allowing unauthenticated attackers to enrol arbitrary email addresses into those lists...

5.8AI score0.00275EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/31 6:00 a.m.•78 views

CVE-2026-14834 Mailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAX

The Mailgun for WordPress plugin before 2.2.1 does not perform any capability or nonce check on an unauthenticated AJAX action that adds subscribers to the site owner's configured email service mailing lists, allowing unauthenticated attackers to enrol arbitrary email addresses into those lists...

0.00275EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/31 6:00 a.m.•25 views

EUVD-2026-51413

The Mailgun for WordPress plugin before 2.2.1 does not perform any capability or nonce check on an unauthenticated AJAX action that adds subscribers to the site owner's configured email service mailing lists, allowing unauthenticated attackers to enrol arbitrary email addresses into those lists...

6.5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Rows per page
Query Builder