383 matches found
Localize: missing sender policy framework (SPF)
A Valid TXT Record was not found in localize.im This can spoof your email address. Proof of Concept: http://mxtoolbox.com/SuperTool.aspx?action=spf:localize.im&run=toolpage related article: Missing SPF for hackerone.com...
Kadira: MISSING SPF (Sender Policy Framework) for meteorapm.com
Missing SPF in meteorapm.com this bug can spoof your email. Reproduce: Go Here http://www.kitterman.com/spf/validate.html? Then Put meteorapm.com Then Click Get SPF Records if any then you will got nothing or no records. Proof: http://prntscr.com/3jygev...
Yahoo's New DMARC Policy Destroys Every Mailing List across the World
Yahoo! The one who enabled the HTTPS connections by default from the beginning of this year, the one who encrypts traffic moving between its data centers from 31st March, now has been accused of harming every Mailing List across the world. Experts from the Internet Engineering Council John R...
HackerOne: Missing SPF for hackerone.com
There is no TXT record in DNS zone that defines Sender Policy Framework entry for domain hackerone.com. This makes it easy to spoof your e-mail address...
Amazon Linux AMI : openswan (ALAS-2013-192)
A buffer overflow flaw was found in Openswan. If Opportunistic Encryption were enabled 'oe=yes' in '/etc/ipsec.conf' and an RSA key configured, an attacker able to cause a system to perform a DNS lookup for an attacker-controlled domain containing malicious records such as by sending an email tha...
Twitter added DMARC support to prevent email phishing
Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...
Twitter added DMARC support to prevent email phishing
Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...
Multiple Vulnerabilities in Smartphone Pentest Framework (SPF)
Advisory ID: HTB23123 Product: Smartphone Pentest Framework SPF Vendor: Bulb Security LLC Vulnerable Versions: v0.1.2 and probably prior Tested Version: v0.1.2 Vendor Notification: October 24, 2012 Public Disclosure: November 14, 2012 Vulnerability Type: OS Command Injection CWE-78, SQL Injection...
Multiple Vulnerabilities in Smartphone Pentest Framework (SPF)
High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in Smartphone Pentest Framework SPF web-based GUI, which could be exploited to get control over a pentester's machine. The research was inspired by the vulnerability found by Jon Passki http://osvdb.org/85873. Even if the...
Google, Facebook and Others Join to Write New Email-Authentication Spec Called DMARC
Google, Yahoo, AOL and a group of other large email senders and receivers have banded together to develop a new framework for sending and receiving email that is designed to stop phishing attacks and other email-borne scams. Called DMARC.org, the new group has come up with a specification called...
Code Execution and FPD vulnerabilities in Simple:Press Forum for WordPress
Hello 3APA3A! I want to warn you about multiple security vulnerabilities in plugin Simple:Press Forum for WordPress. These are Code Execution and Full path disclosure vulnerabilities. Code Execution WASC-31: Execution of arbitrary code is possible via TinyBrowser. As I already told concerning...
Solaris Update for Viper Library 111313-06
Check for the Version of Viper Library OpenVAS Vulnerability Test Solaris Update for Viper Library 111313-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Debian Security Advisory DSA 1659-1 (libspf2)
The remote host is missing an update to libspf2 announced via advisory DSA 1659-1. OpenVAS Vulnerability Test $Id: deb16591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1659-1 libspf2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1659-1 : libspf2 - buffer overflow
Dan Kaminsky discovered that libspf2, an implementation of the Sender Policy Framework SPF used by mail servers for mail filtering, handles malformed TXT records incorrectly, leading to a buffer overflow condition CVE-2008-2469 . Note that the SPF configuration template in Debian's Exim...
LibSPF2 < 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC
No description provided by source. Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to...
DEBIAN-CVE-2008-2469
Heap-based buffer overflow in the SPFdnsresolvlookup function in Spfdnsresolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field...
DSA-1659-1 libspf2 - potential remote code execution
Bulletin has no description...
LibSPF2 < 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost...
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow PoC Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS,...