CVE-2018-0483: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...

Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

PT-2019-1381

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework affected versions not specified Description The issue is related to insecure directory permissions set on a directory created by the Cisco Jabber Client Framework, allowing an authenticated, local attacker to...

KLA12056 XSS vulnerability in Cisco Jabber

A cross-site scripting XSS vulnerability was found in Cisco Jabber. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability Exploitation Related products Cisco-Jabbe...

PT-2019-1390

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework affected versions not specified Description A vulnerability exists due to insufficient validation of user-supplied input, allowing an authenticated, remote attacker to conduct a cross-site scripting XSS attack. Th...

[SECURITY] Fedora 28 Update: prosody-0.10.2-1.fc28

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

[SECURITY] Fedora 27 Update: prosody-0.10.2-1.fc27

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

[SECURITY] [DSA 4216-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4216-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 02, 2018 https://www.debian.org/security/faq -...

Работа по всей территории РФ

НАБИРАЕМ ПЕРСОНАЛ - Возможность зарабатывать от 5000 рублей в день. - График работы гибкий. - Выплаты стабильно, без задержек - еженедельно. - Предоставляем помощь в переезде при необходимости - Приём на работу строго от 18 лет По вопросам трудоустройства пишите НАШИ КОНТАКТЫ: Telegram:...

Prosody Denial of Service Vulnerability (CNVD-2018-09317)

Prosody is a set of Jabber/XMPP communication server software written in Lua. A security vulnerability exists in Prosody versions prior to 0.10.0. A remote attacker could exploit this vulnerability to cause a denial of service crash...

Название Бота Stepa

Возможности Бота + Админ панель Защита от DDos; + Отправка, перехват и удаление СМС-сообщений; + Отображение ботов по категория; + Есть удобная система событий для каждого бота; + Удобный вывод СМС сообщений в диалоге; + Автокрипт apk через api + Отдельная услуга; + Смена и подмена...

DEBIAN-CVE-2017-18226

The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script executes a "kill -TERM cat...

PT-2018-6753

Name of the Vulnerable Software and Affected Versions: jabberd2 versions prior to 2.6.1 Description: The issue allows local users to potentially kill arbitrary processes by modifying PID files. This is possible because the ownership of /var/run/jabber is set to the jabber account, which can be...

PT-2018-6752

Name of the Vulnerable Software and Affected Versions: Gentoo net-im/jabberd2 versions through 2.6.1 Description: The issue allows local users to potentially gain privileges by leveraging access to the jabber account and waiting for root to execute one of the installed programs, including jabberd...

Security Camera Found Riddled With Bugs

CANCUN, Mexico – Tech firm Hanwha Techwin is racing to fix 13 critical security holes found in its popular line of SmartCam security cameras. The patch rollout is part of public disclosure of the vulnerabilities set for today by researchers who discovered the bugs. Flaws range from the use of an...

Cisco Jabber Client Framework Cross-Site Scripting Vulnerability (CNVD-2018-05090)

Cisco Jabber Client Framework JCF is the United States Cisco Cisco company's set of unified communications client framework. The framework provides online status display, instant messaging, voice and other features. A cross-site scripting vulnerability exists in Cisco Jabber Client Framework. A...

CVE-2018-0199

A vulnerability in Cisco Jabber Client Framework JCF could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page. An attacker could...

Cross site scripting

A vulnerability in Cisco Jabber Client Framework JCF could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page. An attacker could...

CVE-2018-0201

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit...