CVE-2025-59956

The CVE-2025-59956 entry concerns AgentAPI (GitHub project for Claude Code, Goose, Aider, Gemini, Amp, Codex). Affected: 0.3.3 and earlier, when served over plain HTTP on localhost, enabling a client-side DNS rebinding attack that can access the /messages endpoint and exfiltrate local data (messa...

CVE-2025-59956 AgentAPI exposed user chat history via a DNS rebinding attack

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for th...

CVE-2020-26547

Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon XEP-0280 results. This allows a remote attacker able to send stanzas to a victim to inject arbitrary messages into the local history, with full control over the sender and receiver displayed to the victim...

CVE-2020-26547

Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon XEP-0280 results. This allows a remote attacker able to send stanzas to a victim to inject arbitrary messages into the local history, with full control over the sender and receiver displayed to the victim...

CVE-2020-26547

Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon XEP-0280 results. This allows a remote attacker able to send stanzas to a victim to inject arbitrary messages into the local history, with full control over the sender and receiver displayed to the victim...

Github Monal Data Falsification Issue Vulnerability

Github Monal is a cross-platform modern XMPP client for iOS and macOS. Monal before 4.9 suffers from a data forgery issue vulnerability that stems from not properly validating the sender of results. An attacker can use this vulnerability to inject arbitrary messages into local history and take fu...

falkirklocalhistorysociety.co.uk XSS vulnerability

Vulnerable URL: http://www.falkirklocalhistorysociety.co.uk/home/index.php?id=107"';-- Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4538723 VIP website...