CVE-2025-70038

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrary code...

CVE-2025-70039

An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223...

CVE-2025-70038

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrary code...

EUVD-2019-1948

Malware in sbrugna...

EUVD-2023-12133

Malicious code in bioql PyPI...

EUVD-2023-23893

Malicious code in bioql PyPI...

CVE-2023-0028

Cross-site Scripting XSS - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+...

CVE-2023-2675

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223...

CVE-2023-1665

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...

CVE-2019-1010205

LINAGORA hublin latest commit 72ead897082403126bf8df9264e70f0a9de247ff is affected by: Directory Traversal. The impact is: The vulnerability allows an attacker to access any file with a fixed extension on the server. The component is: A web-view renderer; details here:...

CVE-2023-2675

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223...

CVE-2023-2675 Improper Restriction of Excessive Authentication Attempts in linagora/twake

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223...

PT-2023-20777 · Linagora · Linagora/Twake

Name of the Vulnerable Software and Affected Versions: linagora/twake versions prior to 2023.Q1.1223 Description: The issue is related to improper restriction of excessive authentication attempts. Recommendations: For versions prior to 2023.Q1.1223, update to version 2023.Q1.1223 or later to...

CVE-2023-2675

CVE-2023-2675 targets linagora/twake versions prior to 2023.Q1.1223, where there is an improper restriction of excessive authentication attempts. Public assessments indicate high-impact potential (confidentiality, integrity, and availability). The vulnerability is tied to brute-force-like behavio...

Twake 安全漏洞

Twake is a secure open-source collaboration platform open-sourced by LINAGORA that improves organizational productivity. A security vulnerability exists in linagora/twake version 2022.Q4.1120 that stems from the lack of protection against brute force attacks on the login page...

CVE-2023-1665 Improper Restriction of Excessive Authentication Attempts in linagora/twake

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...

CVE-2023-1665

CVE-2023-1665 affects linagora/twake (versions prior to 0.0.0). The root cause is improper restriction of excessive authentication attempts, enabling brute-force login on the login endpoint (example PoC shows repeated login attempts against /internal/services/console/v1/login). Impact is high: po...

CVE-2023-1665 Improper Restriction of Excessive Authentication Attempts in linagora/twake

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...

CVE-2023-1665 Improper Restriction of Excessive Authentication Attempts in linagora/twake

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...

CVE-2023-0028

Cross-site Scripting XSS - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+...