SMTPTester

SMTPTester SMTPTester는 SMTP 서버에서 3가지 일반적인 취약점을 테스트하기 위한 python3 도구입니다: 스푸핑 - 내부 사용자를 대신하여 메일을 보낼 수 있는 능력 릴레이 - 이 SMTP 서버를 사용하여 조직 외부의 다른 주소로 이메일을 보내는 것 사용자 열거 - SMTP VRFY 명령을 사용하여 특정 사용자 이름 및\또는 이메일 주소가 조직 내에 존재하는지 확인 사용 방법 먼저 필요한 종속성을 설치합니다: pip install -r requirements.txt 다음으로 필요한 플래그와 함께 도구를...

GHSA-74JP-VM22-8Q8X Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SMTP client System.Net.Mail. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A spoofing vulnerability exis...

CVE-2025-2140

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data...

EUVD-2016-4010

Malware in sbrugna...

EUVD-2021-23985

Malware in sbrugna...

EUVD-2024-52853

Malicious code in bioql PyPI...

CVE-2021-37420

Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...

CVE-2024-49782

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification...

CVE-2024-55929

A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources...

CVE-2024-55929

A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources...

CVE-2024-55929 Mail spoofing

A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources...

CVE-2024-55929

CVE-2024-55929 affects Xerox Workplace Suite. The publicly referenced details indicate a mail spoofing issue allowing forged email headers, making messages appear as if sent from trusted sources. Affected component is the Workplace Suite email handling; the validation of headers appears to be the...

CVE-2024-55929 Mail spoofing

A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources...

PT-2025-3157

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9 Description A mail spoofing issue allows attackers to forge email headers, making it appear as though messages are sent from trusted sources. Recommendations For versions prior to 5.6.701.9,...

CVE-2024-55929: Insufficient Verification of Data Authenticity

A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources...

CVE-2024-49193

Zendesk versions prior to 2024-07-02 are vulnerable to an improper authorization flaw (CWE-290) that allows remote attackers to read ticket history via e-mail spoofing . The root cause is that the system extracts Cc fields from incoming emails to grant additional viewing privileges without suffic...

CVE-2024-49193

Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the...

CVE-2024-49193: Authentication Bypass by Spoofing

Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the...

CVE-2024-27305 SMTP smuggling in aiosmtpd

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

CVE-2024-27305 SMTP smuggling in aiosmtpd

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...