CVE-2026-75514 BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot

BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and antibot modules in src/common/core/blacklist/blacklist.lua, src/common/core/greylist/greylist.lua, and src/common/core/antibot/antibot.lua trust PTR suffix matches in IGNORERDNS,...

CVE-2026-75514 BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot

BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and antibot modules in src/common/core/blacklist/blacklist.lua, src/common/core/greylist/greylist.lua, and src/common/core/antibot/antibot.lua trust PTR suffix matches in IGNORERDNS,...

EUVD-2005-1130

Malware in sbrugna...

EUVD-2020-18729

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-19920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval rather than...

CVE-2020-26099

cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism SEC-491...

Fedora 37 : exim (2022-90e08c08e6)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-90e08c08e6 advisory. Fixed use after free in dmarcdnslookup CVE-2022-3620. ---- Fixed use after free in regex handler. ---- This is an update fixing tainted search query...

[SECURITY] [DLA 3774-1] gross security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3774-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 25, 2024 https://wiki.debian.org/LTS -...

CVE-2020-26099

cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism SEC-491...

CVE-2020-26099

cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism SEC-491...

CVE-2020-26099

cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism SEC-491...

CVE-2020-26099

CVE-2020-26099 affects cPanel prior to 88.0.3, where the SMTP greylisting protection (SEC-491) can be bypassed. Root cause details are not broken out beyond the vendor-reported bypass of the greylisting mechanism. The vulnerability enables an attacker to bypass SMTP greylisting, as described in t...

PT-2020-16282

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.3 Description The issue allows attackers to bypass the SMTP greylisting protection mechanism. Recommendations For versions prior to 88.0.3, update to version 88.0.3 or later to resolve the issue...

CVE-2020-26099: Undefined Security Weakness

cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism SEC-491...

Debian DLA-2062-1 : sa-exim security update

It was found that sa-exim, the SpamAssassin filter for Exim, allows attackers to execute arbitrary code if users are allowed to run custom rules. A similar issue was fixed in spamassassin, CVE-2018-11805, which caused a functional regression in sa-exim. This update restores the compatibility...

[SECURITY] [DLA 2062-1] sa-exim security update

Package : sa-exim Version : 4.2.1-14+deb8u1 CVE ID : CVE-2019-19920 Debian Bug : 946829 It was found that sa-exim, the SpamAssassin filter for Exim, allows attackers to execute arbitrary code if users are allowed to run custom rules. A similar issue was fixed in spamassassin, CVE-2018-11805, whic...

DEBIAN-CVE-2019-19920

sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval rather than direct parsing and/or use of the taint feature. This issue is similar to CVE-2018-11805...

UBUNTU-CVE-2019-19920

sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval rather than direct parsing and/or use of the taint feature. This issue is similar to CVE-2018-11805...

PT-2019-16009 · Exim +1 · Sa-Exim +1

Name of the Vulnerable Software and Affected Versions: sa-exim version 4.2.1 Description: The issue allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval rather than direct parsing and/or use of the taint feature...

Rumble Mail Server 0.51.3135 Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit title: Rumble Mail Server v/0.51.3135 = Stored Cross Site Scripting Download Software: https://sourceforge.net/projects/rumble/?source=directory Author: Nassim Asrir Author Company: Henceforth Contact: email protected Tested On:...