X (Formerly Twitter): No Rate Limit in email leads to huge Mass mailings

Hi Team, I have found a logical flawNOT DoS in the website 'https://app.mopub.com/' 1.Use Burp Suite and capture below request upon navigation to Code integration 2.Click on Send button after entering email address in the input field of 'Enter one or more email addresses and we'll send you links ...

[SECURITY] Fedora 26 Update: exim-4.89-7.fc26

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

[SECURITY] Fedora 26 Update: thunderbird-52.5.0-1.fc26

Mozilla Thunderbird is a standalone mail and newsgroup client...

How to open Secure Mail email links with Native or 3rd party browser on android devices

This article explains how to open secure mail links on a native browser on Android devices...

Apple iOS Memory Corruption Vulnerability (CNVD-2018-00597)

Apple iOS is an operating system developed by Apple for mobile devices, and Mail is one of the mail clients. A security vulnerability exists in the Mail component of Apple iOS prior to version 11.2. An attacker can exploit this vulnerability to cause the system to use incorrect certificates for...

[SECURITY] Fedora 27 Update: thunderbird-52.5.0-1.fc27

Mozilla Thunderbird is a standalone mail and newsgroup client...

Apple macOS High Sierra and iOS Mail Drafts Credential Encryption Vulnerability

Apple macOS High Sierra and iOS are both products of Apple Inc. Apple macOS High Sierra is a dedicated operating system for Mac computers. iOS is an operating system for mobile devices. Mail Drafts is one of the email drafts components. A security vulnerability exists in the Mail Drafts component...

Apple macOS High Sierra Mail component plaintext delivery vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Mail component is one of the email components. A security vulnerability exists in the Mail component of Apple macOS High Sierra prior to 10.13.2, which stems from the fact that an encrypted S/MIME email...

macOS 10.13.x < 10.13.2 Multiple Vulnerabilities (Meltdown)

The remote host is running a version of Mac OS X that is 10.13.x prior to 10.13.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - curl - Directory Utility - IOAcceleratorFamily - IOKit - Intel Graphics Driver - Kernel - Mail - Mail Drafts - OpenSSL...

Open-Xchange: [XSS] Portal Widget Mail

Hi. No filter for Mail in Widget F244689 Steps - 1. Compose New mail html or plain: F244687 2. Add to Portal this mail F244688 3. Sometimes payload run after Add. If not then go to Portal. OX update the data every 10min and this script will run every 10min in any section. That is, as Crontab. :...

Mozilla Thunderbird < 52.5 Multiple Vulnerabilities (macOS)

The version of Mozilla Thunderbird installed on the remote Windows host is prior to 52.5. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105043; scriptversion"1.5";...

Mozilla Thunderbird < 52.5

The version of Thunderbird installed on the remote Windows host is prior to 52.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-26 advisory. - Mozilla developers and community members Christian Holler, David Keeler, Jon Coppeard, Julien Cristau, Jan de Mooij...

Mailsploit vulnerability exists in email address resolution

TL;DR: Mailsploit is a collection of bugs in email clients that allow effective sender spoofing and code injection attacks. The spoofing is not detected by Mail Transfer Agents MTA aka email servers, therefore circumventing spoofing protection mechanisms such as DMARC DKIM/SPF or spam filters. Bu...

Internet Bug Bounty: Mailsploit: a sender spoofing bug in over 30 email clients

Mailsploit is a collection of bugs in email clients that allow effective sender spoofing and code injection attacks. The spoofing is not detected by Mail Transfer Agents MTA aka email servers, therefore circumventing spoofing protection mechanisms such as DMARC DKIM/SPF or spam filters. Bugs were...

MailSploit — Email Spoofing Flaw Affects Over 30 Popular Email Clients

If you receive an email that looks like it's from one of your friends, just beware! It's possible that the email has been sent by someone else in an attempt to compromise your system. A security researcher has discovered a collection of vulnerabilities in more than 30 popular email client...

EulerOS 2.0 SP2 : procmail (EulerOS-SA-2017-1317)

According to the version of the procmail package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate...

EulerOS 2.0 SP1 : procmail (EulerOS-SA-2017-1316)

According to the version of the procmail package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate...

CVE-2017-12353

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...

Input validation

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...

[SECURITY] [DSA 4053-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4053-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 30, 2017 https://www.debian.org/security/faq -...