Code injection

cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...

CVE-2016-10793

cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...

CVE-2016-10793

CVE-2016-10793 affects cPanel prior to 59.9999.145. The root cause is an incorrect #! in Mail::SPF scripts that enables arbitrary code execution. Affected software is cPanel versions before 59.9999.145; the vulnerability allows code execution with the privilege level of the web server. Remediatio...

CVE-2017-18442

cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands SEC-246...

Avito: Missing SPF Records

SPF Record was missing for m.avito.ru...

Chainlink: No Valid SPF Records.

Hiii, There is any issue No valid SPF Records Desciprition : There is a email spoofing vulnerability.Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email spoofing is a tactic used in phishing...

Phishing Campaign Toolkit: King Phisher

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...

MyCrypto: SPF Records (SMTP protection not used)

Hello MyCrypto Team , I am checking your website and found something is missing in SPF record.I don't find you have applied strict SMTP policy to stop spoofed email sending from your domain. I would like to recommend you to read the following article :...

Tor: Email Spoofing Possible on torproject.org Email Domain

Summary: Due to a missing SPF and DMARC record it is possible to spoof emails from torproject.org. This could potentially be used to trick employees or users via phishing emails. Description: Mail servers rely on both SPF and DMARC to properly deal with email spoofing. SPF shows what servers are...

Input validation

A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass certain content filters on an affected device. The vulnerability is due to incomplete input and validation checking...

CVE-2018-0447 Cisco Email Security Appliance URL Filtering Bypass Vulnerability

A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass certain content filters on an affected device. The vulnerability is due to incomplete input and validation checking...

CVE-2018-0447

The CVE-2018-0447 vulnerability affects Cisco AsyncOS Software for the Cisco Email Security Appliance (ESA). It arises from incomplete input/validation handling for certain SPF messages, allowing an unauthenticated, remote attacker to bypass URL filters configured on the ESA by sending a crafted ...

CVE-2018-0447 Cisco Email Security Appliance URL Filtering Bypass Vulnerability

A vulnerability in the anti-spam protection mechanisms of Cisco AsyncOS Software for the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass certain content filters on an affected device. The vulnerability is due to incomplete input and validation checking...

Django: Email Spoofing Possible on djangoproject.com Email Domain

Summary: Due to lacking a SPF and DMARC record it is possible to spoof emails from djangoproject.com. This could potentially be used to trick employees, customers or clients via phishing emails. Description: Mail servers rely on both SPF and DMARC to properly deal with email spoofing. SPF shows...

Update Rollup 1 for System Center 2012 R2 SPF

Update Rollup 1 for System Center 2012 R2 SPF Introduction This article describes Update Rollup 1 for Microsoft System Center 2012 R2 Service Provider Foundation SPF. This update fixes the following issues: After a request to repair or scale a virtual machine role is returned successfully, there ...

Nextcloud: Missing SPF flags for customerupdates.nextcloud.com

Hey, I just checked for SPF records for the customerupdates.nextcloud.com domain, and there are none. The fake message reaches the inbox from this domain. Not spam. You can validate by testing yourself here: http://www.kitterman.com/spf/validate.html This subdomain too: update.nextcloud.com Impac...

MyCrypto: Missing SPF record for the in scope domain

nli@nlistation:$ dig mycrypto.com txt ; DiG 9.10.3-P4-Ubuntu mycrypto.com txt ;; global options: +cmd ;; Got answer: ;; -HEADER DiG 9.10.3-P4-Ubuntu gmail.com txt ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 19223 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1,...

MyCrypto: Missing SPF Records.

What Is SPF/TXT Records? An SPF record is a type of Domain Name Service DNS record that identifies which mail servers are permitted to send email on behalf of your domain. The purpose of an SPF record is to prevent spammers from sending messages with forged From addresses at your domain. Checking...

Domain Analyzer - Analyze The Security Of Any Domain By Finding All the Information Possible

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. How Domain analyzer takes a domain name and finds information about it, such as DNS servers, mail servers, IP...

spf-record.de XSS vulnerability

Open Bug Bounty ID: OBB-543611 Description| Value ---|--- Affected Website:| spf-record.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...