Sucuri: Manipulating of Sucuri.net (List Subscription) Emails (HTML/Script Injection)

Hi there team! I would like to report a 'sneaky', 'weird', but excisting vulnerability, located at the Sucuri.net domain. “A vulnerability exists within your website allowing un-sanitized email form field inputs which could lead an attacker to pass malicious html&script content masquerading as a...

CVE-2016-1315

The proxy engine in Cisco Advanced Malware Protection AMP, when used with Email Security Appliance ESA 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338...

CVE-2016-1315

The proxy engine in Cisco Advanced Malware Protection AMP, when used with Email Security Appliance ESA 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338...

Design/Logic Flaw

The proxy engine in Cisco Advanced Malware Protection AMP, when used with Email Security Appliance ESA 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338...

CVE-2016-1315

CVE-2016-1315 affects Cisco AMP/ESA: the proxy engine can be bypassed via a malformed email containing an encoded file, allowing remote, unauthenticated attackers to bypass content restrictions. Affected: Cisco Advanced Malware Protection and Email Security Appliance (ESA) with versions and bug I...

Cisco Advanced Malware Protection and Email Security Appliance Proxy Engine Security Bypass Vulnerability

A vulnerability in the proxy engine of the Cisco Advanced Malware Protection AMP and the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass security restrictions. The vulnerability is due to improper handling of malformed file methods. An attacker could...

Paragon Initiative Enterprises: Missing SPF

There is no TXT record in DNS zone that defines Sender Policy Framework entry for domain paragonie.com. This makes it easy to spoof your e-mail address...

Threat Outbreak Alert RuleID20773: Email Messages Distributing Malicious Software on February 1, 2016

Medium Alert ID: 43357 First Published: 2016 February 1 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20773 may contain the following files: Name |...

Threat Outbreak Alert RuleID20815: Email Messages Distributing Malicious Software on January 29, 2016

Medium Alert ID: 43333 First Published: 2016 January 29 18:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20815 may contain the following files: Name |...

Threat Outbreak Alert RuleID20600: Email Messages Distributing Malicious Software on January 21, 2016

Medium Alert ID: 43130 First Published: 2016 January 21 14:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20600 may contain the following files: Name |...

Threat Outbreak Alert RuleID20558: Email Messages Distributing Malicious Software on January 21, 2016

Medium Alert ID: 43126 First Published: 2016 January 21 14:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20558 may contain the following files: Name |...

Threat Outbreak Alert RuleID20585: Email Messages Distributing Malicious Software on January 20, 2016

Medium Alert ID: 43115 First Published: 2016 January 20 19:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20585 may contain the following files: Name |...

Threat Outbreak Alert RuleID20581: Email Messages Distributing Malicious Software on January 20, 2016

Medium Alert ID: 43113 First Published: 2016 January 20 19:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20581 may contain the following files: Name |...

Threat Outbreak Alert RuleID20254: Email Messages Distributing Malicious Software on December 23, 2015

Medium Alert ID: 42843 First Published: 2015 December 23 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20254 may contain the following files: Name |...

Threat Outbreak Alert RuleID20247: Email Messages Distributing Malicious Software on December 22, 2015

Medium Alert ID: 42838 First Published: 2015 December 23 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20247 may contain the following files: Name |...

Threat Outbreak Alert RuleID20199: Email Messages Distributing Malicious Software on December 20, 2015

Medium Alert ID: 42807 First Published: 2015 December 21 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20199 may contain the following files: Name |...

CVE-2015-8476

Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an 1 email address to the validateAddress function in class.phpmailer.php or 2 SMTP command to the sendCommand function in class.smtp.php, a different...

Threat Outbreak Alert RuleID20142: Email Messages Distributing Malicious Software on December 16, 2015

Medium Alert ID: 42715 First Published: 2015 December 16 20:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20142 may contain the following files: Name |...

Threat Outbreak Alert RuleID20091: Email Messages Distributing Malicious Software on December 15, 2015

Medium Alert ID: 42672 First Published: 2015 December 15 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20091 may contain the following files: Name |...

Threat Outbreak Alert RuleID20060: Email Messages Distributing Malicious Software on December 13, 2015

Medium Alert ID: 42652 First Published: 2015 December 14 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20060 may contain the following files: Name |...