CVE-2022-1753 WoWonder Group requests.php access control

A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument groupid allows posting messages in other groups. It is possible to launch the attack remotely but it might...

CVE-2022-1753 WoWonder Group requests.php access control

A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument groupid allows posting messages in other groups. It is possible to launch the attack remotely but it might...

Envato WoWonder 安全漏洞

Envato WoWonder is an application from the Australian company Envato. It provides a PHP social networking script. A security vulnerability exists in Envato WoWonder. An attacker could use this vulnerability to post messages in other groups via the groupid operation...

PT-2021-23075 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest commit Description: Discourse is a platform for community discussion. In affected versions, any private message that includes a group had its title and participating user exposed to users that do not hav...

Mail.ru: api.icq.com / возможность отредактировать текст любого пользователя или группы переслав его.

Нашёл лютую дырку дело в том что при пересылке сообщения пользователя группы текст стоит в параметре конечно же я пробовал его отредактировать и послать пакет но никак не выходило и тут я использовал один старый метод, обычно же идёт GET запрос его мы и меняем, но после идёт POST запрос который...

CVE-2015-8299

Buffer overflow in the Group messages monitor Falcon in KNX ETS 4.1.5 Build 3246 allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet...

Viber adds End-to-End Encryption and PIN protected Hidden Chats features

In Brief Viber, the popular mobile messaging app announced Tuesday that it has added full end-to-end encryption for video, voice and text message services for its millions of users. Here, the end-to-end encryption means only you and the person you are communicating with can read the content, and...

KNX ETS 4.1.5 Build 3246 Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits Title: Remote code execution vulnerability in the KNX management software ETS Category/Abstract: Buffer overflow vulnerability Product: ETS Engineering Tool Software Affected versions: ETS 4.1.5 Build 3246 no other versions tested Fixed in...

CVE-2011-4593

Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle user/actionredir group messages, which allows remote authenticated users to discover e-mail addresses by visiting the messaging interface...

vBulletin 4.0.x 4.1.3 - 'messagegroupid' SQL Injection

Exploit Title: Vbulletin 4.0.x = 4.1.3 messagegroupid SQL injection Vulnerability 0-day Google Dork: intitle: powered by Vbulletin 4 Date: 20/07/2011 Author: FB1H2S Software Link: urlhttp://www.vbulletin.com//url Version: 4.x.x Tested on: relevant os CVE : urlhttp://members.vbulletin.com//url...