Email spoofing: how attackers impersonate legitimate senders

Introduction In a nutshell, email spoofing is the creation of fake emails that seem legitimate. This article analyzes the spoofing of email addresses through changing the From header, which provides information about the senders name and address. SMTP Simple Mail Transfer Protocol, the main email...

Privilege Escalation

OpenDMARC is vulnerable to privilege escaltion. The vulnerability exists due to pypolicyd-spf allowing an attacker to bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

PT-2021-24796

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.38 Description The issue concerns a problem with resuming from sleep before the interface was brought up, specifically related to the mcp251x component. The actual impact and potential for attack have not...

PT-2021-24679

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description The issue is related to the mcp251x component in the Linux Kernel, specifically concerning the resume from sleep functionality before the interface is brought up. The actual impact and potenti...

PT-2021-28790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.38 Description The issue concerns a problem with resuming from sleep before the interface was brought up, specifically affecting the mcp251x component. The actual impact and potential for attack have not be...

PT-2021-28372

Name of the Vulnerable Software and Affected Versions: GattLib version 0.3-rc1 Description: The issue is related to a stack-based buffer over-read in the get device path from mac function located in dbus/gattlib.c. Recommendations: For GattLib version 0.3-rc1, at the moment, there is no informati...

PT-2021-20216

Name of the Vulnerable Software and Affected Versions GattLib version 0.3-rc1 Description The issue is a stack-based buffer over-read in the get device path from mac function located in dbus/gattlib.c. Recommendations For GattLib version 0.3-rc1, consider restricting access to the get device path...

Gallery From Files <= 1.6.0 - Unauthenticated RCE

The upload feature of the plugin does not properly check for the allowed extensions, allowing them to be set in the request and attempting to remove the dangerous ones such as .php and .js, but forgetting about .php4, .html etc. As a result, unauthenticated users could upload arbitrary .php4 file...

WordPress Gallery from files plugin <= 1.60 - Unauthenticated Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE vulnerability discovered by WPScanTeam in WordPress Gallery from files plugin versions = 1.60. Solution This plugin has been closed as of May 24, 2021 and is not available for download. This closure is temporary, pending a full review...

Gallery From Files <= 1.6.0 - Reflected Cross-Site Scripting (XSS)

This plugin gives us the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lack of CSRF check, the attack could also b...

Malicious Package

Overview e39test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview e39testing is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview npmkoopwwww is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

CVE-2021-24327

The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users even with the unfilteredhtml disabled to set XSS payloads...

CVE-2021-24327: Improper Neutralization of Input During Web Page Generation

The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users even with the unfilteredhtml disabled to set XSS payloads...

PT-2021-15864

Name of the Vulnerable Software and Affected Versions The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin versions prior to 6.4 Description The issue allows high privilege users to set XSS payloads in the Redirect From and Redirect To fields when creating a new redirect in the...

PT-2021-28258

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, as reported by OSS-Fuzz. The crash involves the functions frame get vlmetalayers, frame ...

CVE-2021-24280

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the importfromdebug AJAX action to inject PHP objects...

CVE-2021-24279

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the importfromdebug AJAX action to install any plugin from the WordPress repository...

CVE-2021-24280

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the importfromdebug AJAX action to inject PHP objects...