844 matches found
fitline-im-norden.de Improper Access Control vulnerability OBB-2395527
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GLSA-202105-15 : Prosody IM: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202105-15 Prosody IM: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Prosody IM. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...
Fedora: Security Advisory for quaternion (FEDORA-2021-17a9cdcf98)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for quaternion (FEDORA-2021-e1572c9b84)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 35 Update: quaternion-0.0.95.1-1.fc35
Quaternion is a cross-platform desktop IM client for the Matrix protocol...
[SECURITY] Fedora 34 Update: quaternion-0.0.95.1-1.fc34
Quaternion is a cross-platform desktop IM client for the Matrix protocol...
Security Bulletin: Vulnerability in Apache Log4j affects Collaboration and Deployment Services (CVE-2021-44228)
Summary There is a vulnerability in the Apache Log4j open source library which is used by Collaboration and Deployment Services for logging of messages and traces. This issue has been addressed. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to...
The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, and Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, and Cisco Unified Communications Manager IM & Presence Service web interfaces is related to the manipulation of inter-site requests. Exploiting this vulnerability allows...
CVE-2021-34773: Cross-Site Request Forgery (CSRF)
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated,...
CVE-2021-34701: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could...
PT-2021-5008
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager Session Management Edition versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service...
PT-2021-7022
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct SQL injection...
Incredimail Credential Gatherer
This module searches for Incredimail credentials on a Windows host. Module Options msf use post/windows/gather/credentials/incredimail msf postincredimail show actions ...actions... msf postincredimail set ACTION msf postincredimail show options ...show and set options... msf postincredimail run...
Gadugadu Credential Gatherer
This module searches for Gadugadu credentials on a Windows host. Gadu-Gadu is a Polish instant messaging client using a proprietary protocol. Gadu-Gadu was the most popular IM service in Poland. Module Options msf use post/windows/gather/credentials/gadugadu msf postgadugadu show actions...
berg-im-gau.de Cross Site Scripting vulnerability OBB-2142776
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
acheron (0.1.0), actix_web_metrics_mw (>=0.0.1, <=0.3.1) +81 more potentially affected by CVE-2020-36204 via im (>=12.3.4, <=15.0.0)
im CARGO version =12.3.4, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.1.1, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2020-36204 Source advisory: OSV:GHSA-Q9H2-4XHF-23XX...
GHSA-Q9H2-4XHF-23XX Data races in im
An issue was discovered in the im crate prior to 15.1.0 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur...
Data races in im
An issue was discovered in the im crate prior to 15.1.0 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur...
GLSA-202105-07 : Telegram: Security bypass
The remote host is affected by the vulnerability described in GLSA-202105-07 Telegram: Security bypass It was discovered that Telegram failed to invalidate a recently active session. Impact : Please review the referenced CVE identifiers for details. Workaround : There is no known workaround at th...
Prosŏdy IM: Multiple vulnerabilities
Background Prosŏdy IM is a modern XMPP communication server. It aims to be easy to set up and configure, and efficient with system resources. Description Multiple vulnerabilities have been discovered in Prosŏdy IM. Please review the CVE identifiers referenced below for details. Impact Please revi...