Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

exim

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

CVE-2023-51766 is a security vulnerability affecting Exim mail servers prior to version 4.97.1. The vulnerability arises from Exim's handling of SMTP PIPELINING and CHUNKING extensions, specifically its acceptance of the SMTP sequence <LF>.<CR><LF>, which deviates from the standard SMTP protocol behavior. This non-standard acceptance allows remote attackers to perform SMTP smuggling, a technique where crafted SMTP commands are injected into the communication stream to manipulate mail server behavior. By exploiting this, attackers can inject email messages with spoofed MAIL FROM addresses, effectively bypassing Sender Policy Framework (SPF) protections that rely on verifying the sender's domain authenticity. The vulnerability does not require authentication or user interaction, making it remotely exploitable. The issue stems from interoperability differences between Exim and other popular mail servers that do not support the <LF>.<CR><LF> sequence, enabling attackers to exploit this discrepancy to insert unauthorized messages. Although no public exploits have been reported in the wild, the vulnerability's nature suggests a high risk of phishing, spoofing, and email fraud attacks if exploited. The lack of a CVSS score indicates the need for a severity assessment based on technical impact and exploitability factors.

Detailed information about CVE-2023-51766: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-51766: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-51766: n/a

Threats Tagged 'cve-2023-51766'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-51766'

Lead Pen Test Professional