https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 01:43:46 +0000 https://cve.radiocsirt.org/vuln/cve-2025-61084 <p>MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets (&lt;&gt;) in the From: header of SMTP DATA. An attacker can craft a From: header with multiple invisible Unicode thin spaces to display a spoofed sender while passing validation, allowing email spoofing even when anti-spoofing protections are in place. NOTE: this is disputed by the Supplier because UI spoofing occurs in a client, not in a server such as MDaemon&#39;s product or any other server implementation. Also, if a client without its own spoofing protection must be used, the Header Screening feature in MDaemon&#39;s product can be employed to mitigate the client-side vulnerability.</p> <p>MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets (&lt;&gt;) in the From: header of SMTP DATA. An attacker can craft a From: header with multiple invisible Unicode thin spaces to display a spoofed sender while passing validation, allowing email spoofing even when anti-spoofing protections are in place. NOTE: this is disputed by the Supplier because UI spoofing occurs in a client, not in a server such as MDaemon&#39;s product or any other server implementation. Also, if a client without its own spoofing protection must be used, the Header Screening feature in MDaemon&#39;s product can be employed to mitigate the client-side vulnerability.</p> https://cve.radiocsirt.org/vuln/cve-2025-61084