frogy2.0
iamthefrogy/frogy2.0Orbis is an full spectrum automated external attack surface intelligent toolkit.
cloud-securitydns-analysisemail-security+9
400
iamthefrogy/frogy2.0Orbis is an full spectrum automated external attack surface intelligent toolkit.
wyatu/cve-2018-8581Automated exploit script for CVE-2018-8581 that delegates mailbox access in Microsoft Exchange Server, enabling privilege escalation and lateral…
0neb1n/cve-2020-16947Proof-of-concept exploit for CVE-2020-16947, a Microsoft Outlook RCE triggered by malformed HTML content leading to a heap buffer overflow and remote…
demossl/cve-2021-33766-proxytokenProof-of-concept exploit for CVE-2021-33766 (ProxyToken) authentication bypass in Microsoft Exchange Server. Supports single and batch target…
eeenvik1/cve-2023-51764Proof-of-concept exploit for CVE-2023-51764 SMTP smuggling vulnerability in Postfix, enabling email spoofing and message injection via crafted SMTP…
horkimhab/cve-2026-73570Proof-of-concept exploit for an actively exploited Zimbra Collaboration Suite vulnerability, designed for authorized penetration testing and…
victoni/roundcube-cve-2024-42008-and-cve-2024-42010-pocProof-of-concept exploit demonstrating CSS injection and cross-site scripting (XSS) vulnerabilities in Roundcube Webmail, enabling email content…
0nyx-my7h/cve-2025-43920PoC and technical write-up for CVE-2025-43920, a remote command injection in GNU Mailman 2.1.39's external archiver allowing unauthenticated code…
0xblackash/cve-2026-28289Zero-click unauthenticated RCE exploit for FreeScout (CVE-2026-28289) via email attachment filename bypass using Unicode characters, achieving remote…
biutrap/cve-2026-73570Proof-of-concept exploit for CVE-2026-73570, demonstrating SMTP command injection via crafted RCPT TO header to trigger service status changes.
saykino/cve-2026-31283Documentation of CVE-2026-31283: an email bombing vulnerability in Totara LMS's forgot password API due to missing rate limiting, allowing…
saykino/cve-2025-54320Proof-of-concept for CVE-2025-54320: an email bombing vulnerability in Ascertia SigningHub's Invite User API due to missing rate limiting, allowing…
ashwesker/ashwesker-cve-2025-68645Proof-of-concept exploit for CVE-2025-68645 targeting Zimbra Mail, intended for security validation and CSIRT testing. Redirects to the maintained…
pinpinsec/cve-2020-14066Proof-of-concept exploit for CVE-2020-14066 targeting insecure permissions in Icewarp Email Server 12.3.0.1, enabling privilege escalation or…
pinpinsec/cve-2020-14065Exploit for CVE-2020-14065: unlimited file upload vulnerability in Icewarp Email Server 12.3.0.1, enabling remote code execution via crafted requests.
derrickschoen/laravel-frameworkFork of laravel/framework 10.50.2 with CVE-2026-48019 (CRLF injection in default email rule) backported into ValidatesAttributes::validateEmail.…