Lucene search
+L

9 matches found

Kitploit
Kitploit
•added 2026/10/05 2:39 p.m.•13 views

Camelishing

Camelishing 소셜 엔지니어링 도구 Camelishing 소셜 엔지니어링 도구 Python 3x 연락처 !CONTACT! | Coded Abdulaziz ALTUNTAŞ | | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | 기능 1-Bulk email sending 2-Basic Python Agent Creator 3-Office Excel Macro Creator 4-DDE Excel Creatoror...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/05 11:32 a.m.•17 views

goCabrito

goCabrito 피싱 캠페인 전송을 위한 매우 체계적이고 유연한 스크립트입니다. 기능 단일 이메일 전송 이메일 목록텍스트 전송 이름과 성이 포함된 이메일 목록CSV 전송 첨부 파일 지원 이메일을 그룹으로 분할 그룹 간 이메일 전송 지연 메시지 본문에 배치 및 대체할 태그 지원 name 태그를 HTML 메시지에 추가하여 이름으로 대체 --to CSV와 함께 사용. track-click 태그를 HTML 메시지의 URL에 추가. track-open 태그를 HTML 메시지에 추가. num 태그를 추가하여 임의의 전화번호로 대체. 실...

6.3AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/18 8:38 p.m.•7 views

CVE-2026-85271 Open edX Platform: Stored CSS Injection in Email Digest Notifications via Unsanitized Thread Title (incomplete patch of CVE-2026-42857)

Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the addadditionalattributestonotifications function in openedx/core/djangoapps/notifications/email/utils.py assigns notification content without sanitizing discussion-titl...

6.1CVSS5.8AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-85271: Improper Neutralization of Input During Web Page Generation

Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the addadditionalattributestonotifications function in openedx/core/djangoapps/notifications/email/utils.py assigns notification content without sanitizing discussion-titl...

6.1CVSS5.9AI score0.00354EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/20 5:21 p.m.•16 views

CVE-2026-45295 FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tracking endpoint GET /thread/read/conversationid/threadid allows unauthenticated attackers to enumerate valid conversation and thread IDs, and modify thread state openedat...

6.5CVSS5.3AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/20 5:21 p.m.•13 views

CVE-2026-45295 FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tracking endpoint GET /thread/read/conversationid/threadid allows unauthenticated attackers to enumerate valid conversation and thread IDs, and modify thread state openedat...

6.5CVSS5.9AI score0.00338EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/20 5:21 p.m.•61 views

CVE-2026-45295 FreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking Endpoint

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tracking endpoint GET /thread/read/conversationid/threadid allows unauthenticated attackers to enumerate valid conversation and thread IDs, and modify thread state openedat...

6.5CVSS0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/07 4:07 p.m.•12 views

CVE-2026-35584 FreeScout has an Unauthenticated IDOR in Open Tracking Endpoint Allows Cross-Conversation Thread Manipulation and Enumeration

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, the endpoint GET /thread/read/conversationid/threadid does not require authentication and does not validate whether the given threadid belongs to the given conversationid. This allows any...

6.9CVSS6.2AI score0.0035EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•2 views

CVE-2025-10047: Improper Neutralization of Special Elements used in an SQL Command

The Email Tracker – Email Log, Email Open Tracking, Email Analytics & Email Management for WordPress Emails plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.3.15 due to insufficient escaping on the user supplied parameter and...

4.9CVSS5.7AI score0.00366EPSS
SaveExploits0References1
Rows per page
Query Builder