Malicious Package

Overview spf-analytics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Medium: sendmail

Issue Overview: sendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail...

Email Infra Pivot

Pivot on email infrastructure MX/SPF/DMARC/DKIM for a target domain. from kittysploit import import json import dns.resolver class ModuleAuxiliary: info = "name": "Email Infra Pivot", "author": "KittySploit Team", "description": "Pivot on email infrastructure MX/SPF/DMARC/DKIM for a target...

Mail Security Posture

Assess outbound email security posture MX stack, SPF, DMARC, DKIM and classify likely SaaS mail providers Microsoft 365, Google Workspace, SEGs for an organization domain. from kittysploit import import json import re import dns.resolver class ModuleAuxiliary: info = "name": "Mail Security...

PT-2026-27020

Summary The email channel authorizes senders based on the parsed From header identity only. If upstream email authentication/enforcement is weak for example, relaxed SPF/DKIM/DMARC handling, an attacker can spoof an allowlisted sender address and have the message treated as trusted input. Details...

CVE-2016-10793

cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...

EUVD-2015-4207

Malware in sbrugna...

EUVD-2019-11327

Malware in sbrugna...

EUVD-2006-4604

Malware in sbrugna...

EUVD-2016-1787

Malware in sbrugna...

EUVD-2023-46577

Malicious code in bioql PyPI...

EUVD-2024-48177

Malicious code in bioql PyPI...

Fake DocuSign email hides tricky phishing attempt

On my daily rounds, I encountered a phishing attempt that used a not completely unusual, yet clever delivery method. What began as a seemingly routine DocuSign notification turned into a multi-layered deception involving Webflow, a shady redirect, and a legitimate Google login page. Webflow is a...

TencentOS Server 4: libspf2 (TSSA-2025:0149)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0149 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2024-7208

A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain, thus bypass security measures provided by DMARC or SPF or DKIM policies...

CVE-2025-22996

A stored cross-site scripting XSS vulnerability in the spftablecontent component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter...

OESA-2024-2584 libspf2 security update

libspf2 is an implementation of the SPF Sender Policy Framework specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is...

OESA-2024-2586 libspf2 security update

libspf2 is an implementation of the SPF Sender Policy Framework specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is...

ROS-20240911-05

A vulnerability in the libspf2 library of the Exim mail server is related to an integer overflow resulting from the of SPF macros. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

PT-2024-41041 · Qtech · Qtech Gigabit Spf Wifi Gateway

Name of the Vulnerable Software and Affected Versions: Qtech Gigabit SPF WiFi Gateway affected versions not specified Description: The issue is related to inadequate access control in the Qtech Gigabit SPF WiFi Gateway's firmware, allowing a remote attacker to execute arbitrary commands on the...