pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

flanker

Flanker - análisis de direcciones de correo electrónico y MIME para Python .. image:: https://travis-ci.org/mailgun/flanker.svg?branch=master :target: https://travis-ci.org/mailgun/flanker .. image:: https://coveralls.io/repos/github/mailgun/flanker/badge.svg?branch=master :target:...

CVE-2019-9673

CVE-2019-9673: Vulnerabilidad del filtro de contenido de Freenet NOTA: he divulgado este bug por completo al equipo de Freenet y he trabajado con ellos para verificar su parche. El parche ya está implementado en la última versión de Freenet. Recientemente he encontrado una vulnerabilidad de...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Divulgación de seguridad: lectura fuera de límites en el analizador MIME de facil.io provoca la caída del servidor ID de CVE asignado CVE-2026-66729 Producto: facil.io Versiones afectadas: facil.io = 0.6.0 todas las 0.6.x, todas las 0.7.x, master; introducido cuando se añadió el analizador MIME e...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

Johnny-You-Are-Fired

Johnny-You-Are-Fired Artefactos para la publicación USENIX | Artículo completo aquí Resumen OpenPGP y S/MIME son los dos estándares principales para cifrar y firmar digitalmente correos electrónicos. Se supone que las firmas digitales garantizan la autenticidad e integridad de los mensajes. En es...

CVE-2026-34975

CVE-2026-34975 — CRLF Email Header Injection in Plunk via raw MIME construction Severity : High CVSS 8.5 CWE : CWE-93 — Improper Neutralization of CRLF Sequences 'CRLF Injection' Affected : useplunk/plunk = 0.7.1 Fixed in : 0.8.0 Advisory : GHSA-2mvm-rg5v-7hfq NVD :...

CVE-2026-42879

CVE-2026-42879 - FacturaScripts - Carga de Archivos Sin Restricciones Autenticada mediante Bypass de Tipo MIME Resumen Existe una vulnerabilidad de carga de archivos sin restricciones autenticada en la funcionalidad de carga de imágenes de productos de FacturaScripts. Un atacante con credenciales...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-40487

CVE-2026-40487 - Postiz = 2.21.5 - Subida Arbitraria de Archivos mediante Suplantación de MIME-Type a XSS Almacenado y Toma de Control de Cuenta Descubierto y reportado por: Astaruf Informe completo: https://nstsec.com/en/posts/postiz-xss-cve-2026-40487/ Entrada NVD:...

mime-is-broken

Kit de herramientas para generar y probar MIME defectuoso Este es un kit de herramientas para generar correos con MIME defectuoso con el fin de probar el comportamiento de los MUA y los productos de seguridad, es decir, si se ajustan o si un MIME defectuoso podría usarse para evadir un producto d...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload

CVE-2025-3914 - Subida arbitraria de archivos en Aeropage Sync for Airtable WordPress Descripción El plugin Aeropage Sync for Airtable de WordPress ≤ v3.2.0 es vulnerable a subidas arbitrarias de archivos autenticadas debido a una validación insuficiente del tipo de archivo en la función...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versions " image.jpg 4 Rename this file to image.php. 5 On the form page, upload the created image.php file. 6 Now, to run this file just access https://yoursite.com/assets/image.php Note: replacehttps://yoursite.com with the address of your test installation...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Carga Arbitraria de Archivos sin Autenticación Investigación por: Atomic Edge Severidad: Crítica | CVSS: 9.8 | Autenticación Requerida: Ninguna ⚠️ v2 — Correcciones técnicas aplicadas según los comentarios de la comunidad. Consulte el Registro de cambios...

CLEANSTART-2026-EP02666 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the cri-tools package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

sudowp-postgallery

SudoWP PostGallery Fork de Seguridad Contribuidores: SudoWP, WP Republic Autores originales: RTO GmbH Etiquetas: gallery, security, patched, cve-2025-13543 Requiere al menos: 5.8 Probado hasta: 6.7 Versión estable: 1.12.6 Licencia: GPLv2 o posterior Aviso de Seguridad Este es un fork reforzado en...