CVE-2015-0280

CVE-2015-0280 is rejected/not used per the initial description.

SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and...

CVE-2022-0280

creationtimestamp| type| source ---|---|--- 2022-03-11 02:14:02+00:00| seen| https://t.me/cibsecurity/38752...

CVE-2022-0280 McAfee Total Protection (MTP) - File Deletion vulnerability

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of...

CVE-2022-0280

The CVE-2022-0280 issue affects McAfee Total Protection for Windows, specifically the QuickClean feature. A race condition in QuickClean (prior to version 16.0.43) can be exploited by a local attacker to elevate privileges and delete arbitrary files, potentially causing data loss and denial of se...

Mageia: Security Advisory (MGASA-2014-0280)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Junos OS DoS (JSA11184)

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11184 advisory. - Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise PE chipset-based line cards...

Important Photon OS Security Update - PHSA-2021-3.0-0280

Updates of 'falco' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0280

Updates of 'falco' packages of Photon OS have been released...

CVE-2021-0280

CVE-2021-0280 affects Juniper Junos OS on PTX and QFX10K with Paradise (PE) chipset line cards. Root cause: Improper initialization in the DDoS policer path of the Packet Forwarding Engine, causing ddos-protection CLI changes to not apply beyond default DDoS settings. Impact: BFD session flapping...

Virus.Win32.Shodi.e Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/37d4a5ba123dd32f1e2c4ba0be14e77cB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Virus.Win32.Shodi.e Vulnerability: Unauthenticated Remote Command Execution Description: The virus...

KB5003694: Windows 7 and Windows Server 2008 R2 Security Update (June 2021)

The remote Windows host is missing security update 5003694. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...

KB5003646: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2021)

The remote Windows host is missing security update 5003646. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...

CVE-2020-26547

Monal

CVE-2020-26547

Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon XEP-0280 results. This allows a remote attacker able to send stanzas to a victim to inject arbitrary messages into the local history, with full control over the sender and receiver displayed to the victim...

CVE-2020-0280

creationtimestamp| type| source ---|---|--- 2020-12-15 18:40:43+00:00| seen| https://t.me/cibsecurity/20810...

CVE-2020-0280

In nciproceemanagementrsp of ncihrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID...

CVE-2020-0280

CVE-2020-0280 affects Android 11 and is caused by an out-of-bounds read in nci_proc_ee_management_rsp of nci_hrcv.cc due to a missing bounds check. This can lead to local information disclosure with no additional execution privileges; exploitation requires user interaction. The documentation does...

User Impersonation in converse.js

Versions of converse.js prior to 1.0.7 for 1.x or 2.0.5 for 2.x are vulnerable to User Impersonation. The package provides an incorrect implementation of XEP-0280: Message Carbons that allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display...

GHSA-W973-2QCC-P78X User Impersonation in converse.js

Versions of converse.js prior to 1.0.7 for 1.x or 2.0.5 for 2.x are vulnerable to User Impersonation. The package provides an incorrect implementation of XEP-0280: Message Carbons that allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display...