Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-43770-POC — A Proof-Of-Concept for the CVE-2023-43770 vulnerability. | Kitploit
Tools/GitHubGitHub/s3cb0y/cve-2023-43770-poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubs3cb0y/cve-2023-43770-poc

CVE-2023-43770-POC

A Proof-Of-Concept for the CVE-2023-43770 vulnerability.

View Repository
351142 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-43770 POC

A Proof-Of-Concept for the recently found CVE-2023-43770 vulnerability.

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.

Usage

root@kitploit:~
python cve-2023-43770.py -e [email protected] -p Attack3rPwd -t [email protected]

Demo

References

https://nvd.nist.gov/vuln/detail/CVE-2023-43770 https://github.com/roundcube/roundcubemail/commit/e92ec206a886461245e1672d8530cc93c618a49b https://roundcube.net/news/2023/09/15/security-update-1.6.3-released

Disclaimer

This repository is not intended to be a one-click exploit to CVE-2023-43770. The purpose of this project is to help people learn about this vulnerability, and perhaps test their own applications.

Download Tool