striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

CVE-2019-11395

CVE-2019-11395 Panoramica Questo Proof of Concept PoC dimostra una vulnerabilità di Buffer Overflow in MailCarrier 2.51, che consente ad attaccanti remoti di eseguire codice arbitrario tramite una stringa lunga. La vulnerabilità può essere sfruttata utilizzando i seguenti processi: SMTP RCPT TO...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Buffer Overflow in Seattle Lab Mail SLmail 5.5 - POP3 Semplice buffer overflow basato sullo stack passo dopo passo 1 FUZZ dell'applicazione Nel primissimo passaggio eseguiremo il fuzz dell'applicazione con un semplice script Spike nel frattempo avremo anche SLmail collegatoed...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

mailenable-cve-2022-36934

MailEnable CVE-2022-36934 शोषण मॉड्यूल MailEnable के प्रमाणीकरण बायपास भेद्यता CVE-2022-36934 के लिए Metasploit मॉड्यूल, जो दूरस्थ कोड निष्पादन की ओर ले जाता है। 📌 विशेषताएँ SMTP/POP3 में MailEnable के अनुचित इनपुट स्वच्छता का शोषण करता है x86 और x64 Windows लक्ष्यों दोनों का समर्थन करता है कोई...

CVE-2003-0264-SLmail-5.5

CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 Buffer Overflow Riferimenti https://vulners.com/cve/CVE-2003-0264 Vulnerabilità SLMail non esegue alcun controllo dei limiti quando viene inviata una password POP3. Di conseguenza, è possibile eseguire codice arbitrario inviando una stringa PASS POP3 lung...

CVE-2003-0264

SLMail 5.5 POP3 PASS Parameter Buffer Overflow Versione del programma: SLMail 5.5 Vulnerabilità: overflow del buffer nel parametro PASS del servizio POP3 porta 110 di Seattle Lab Mail SLMail 5.5 Testato su: Windows 7 x86 Sfruttamento: overflow del buffer remoto Video PoC:...

CVE-2003-0264

🐞 CVE-2003-0264: SLMail 5.5 - Buffer Overflow basato su stack Classico buffer overflow basato su stack in SLMail 5.5 che mostra come i primi server di posta potessero essere compromessi tramite comandi SMTP e POP3 di dimensioni eccessive. 📑 Indice dei contenuti Perché esiste questo repository...

CVE-2019-11395

Exploit CVE-2019-11395 🛡️ Sobre a CVE-2019-11395 🕵️ A CVE-2019-11395 descreve uma vulnerabilidade de estouro de buffer no aplicativo de e-mail MailCarrier 2.51, permitindo execução remota de código. A vulnerabilidade ocorre nos processos SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP ou POP3 RETR...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

python: Fix of 2 CVEs

CVE-2025-15366: reject control characters in IMAP commands in imaplib.IMAP4.command to prevent command injection via newlines - CVE-2025-15367: reject control characters in POP3 commands in poplib.POP3.putcmd to prevent command injection via newlines...

CVE-2026-56766

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

PT-2026-52540

Name of the Vulnerable Software and Affected Versions Hydra versions prior to 9.7 commit 9cc84c2 Description A stack buffer overflow exists in the NTLM authentication process across the SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules. The issue occurs when the software...

[SECURITY] Fedora 43 Update: dovecot-2.4.4-1.fc43

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

[SECURITY] Fedora 44 Update: dovecot-2.4.4-1.fc44

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

[SECURITY] Fedora 43 Update: nginx-1.30.2-1.fc43

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

python3 security update

An update is available for python3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming language,...

Astra Linux – Vulnerability in curl

When curl version 7.20.0 or later connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can send multiple responses at once, which are cached by curl. In this case, curl upgrades to TLS, but it does not discard the cached responses. Instead, it...

AZL-86658 CVE-2026-4873 affecting package curl for versions less than 8.11.1-7

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...