PT-2024-28049 · Hush Line · Hush Line

Name of the Vulnerable Software and Affected Versions: Hush Line versions prior to 0.1.0 Description: Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. There is a stored XSS in the Inbox. The input is displayed using the safe Jinja2 attribute,...

Exploit for Cross-site Scripting in Dlink Dir-845L_Firmware

CVE-2024-33111 D-Link DIR-845L routers version 1.01KRb03 and b...

Malicious code in braze-content-cards-inbox (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1840 Malicious code in braze-content-cards-inbox (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-3331 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-845L versions =v1.01KRb03 Description: The issue is related to insufficient protection of internal data when handling the file parameter, potentially allowing a remote attacker to gain unauthorized access to protected information...

SUSE CVE-2023-52624

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before executing GPINT commands Why DMCUB can be in idle when we attempt to interface with the HW through the GPINT mailbox resulting in a system hang. How Add dcwakeandexecutegpint to wrap the wake,...

Nexkey Input Validation Error Vulnerability

Nexkey is an open source, decentralized social media platform for nexryai individual developers. An input validation error vulnerability exists in versions of Nexkey prior to 12.122.2, which stems from insufficient validation of ActivityPub requests received in the inbox, and could allow any user...

Denial Of Service (DoS)

vrite is vulnerable to Denial of Service DoS. This vulnerability exists due to the absence of rate limits, which allows an attacker to send spam messages to the victim's email inbox...

CVE-2023-5281

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

PT-2023-32002 · Unknown +1 · Sourcecodester Engineers Online Portal +1

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A critical issue has been found in the file remove inbox message.php, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely. The issue...

Beyond Cold Calls: Ringless Voicemail As A Personalized Customer Engagement Tool

By Owais Sultan Ringless voicemail RVM is a technology that allows businesses to deliver pre-recorded messages directly to a customer's voicemail inbox without their phone ringing. This is a post from HackRead.com Read the original post: Beyond Cold Calls: Ringless Voicemail As A Personalized...

Semrush: IDOR allows information disclosure

A vulnerability in the Social Media Inbox tool's task tracker allowed information disclosure. The tool enables linking social accounts to oversee content and engage audiences. Its task tracker lets users delegate messages to colleagues. It was found a user could assign messages to any user ID,...

Agent can get inbox credentials through api

Description user with agent privileges can get access to sensitive inbox details through api Proof of Concept 1. Create normal user with agent privileges 2. get api key for this user 3. use endpoint https://www.chatwoot.com/developers/api/tag/Inboxes/operation/listAllInboxes 4. if inbox is...

CVE-2022-28747

Key reuse in GoSecure Titan Inbox Detection & Response IDR through 2022-04-05 leads to remote code execution. To exploit this vulnerability, an attacker must craft and sign a serialized payload...

Remote code execution

Key reuse in GoSecure Titan Inbox Detection & Response IDR through 2022-04-05 leads to remote code execution. To exploit this vulnerability, an attacker must craft and sign a serialized payload...

CVE-2022-28747

Key reuse in GoSecure Titan Inbox Detection & Response IDR through 2022-04-05 leads to remote code execution. To exploit this vulnerability, an attacker must craft and sign a serialized payload...

CVE-2022-28747

CVE-2022-28747 affects GoSecure Titan Inbox Detection & Response (IDR); root cause is key reuse that enables remote code execution. The vulnerability exists in IDR versions prior to 2022-04-05. An attacker can exploit by crafting and signing a serialized payload. Impact is remote code execution w...

GoSecure Titan 安全漏洞

GoSecure Titan is a hosted detection and response platform from GoSecure. A security vulnerability exists in GoSecure Titan Inbox Detection & Response IDR that stems from key reuse in Inbox Detection & Response IDR that can lead to remote code execution...

Malicious code in inbox-zero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a50d075a7a6ae36d254356739efc2479c86410d6d8a614f29578c92baa25b7ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3806 Malicious code in inbox-zero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a50d075a7a6ae36d254356739efc2479c86410d6d8a614f29578c92baa25b7ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...