TIBCO Security Advisory: April 14, 2021 - TIBCO Messaging - Eclipse MosquittoDistribution -2021-28826

TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerability Original releasedate: April 14, 2021 Last revised: CVE-2021-28826 Source: TIBCO Software Inc. Products Affected TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition...

TIBCO Security Advisory: April 14, 2021 - TIBCO Messaging - Eclipse Mosquitto Distribution -2021-28825

TIBCO Messaging - Eclipse Mosquitto Distribution - Core Windows Platform Installation vulnerability Original releasedate: April 14, 2021 Last revised: CVE-2021-28825 Source: TIBCO Software Inc. Products Affected TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition versions...

WS-2021-0059

Nats is a Node.js client for the NATS messaging system...

Signal Adds a Payments Feature—With Cryptocurrency

The encrypted messaging app is integrating support for MobileCoin in a bid to keep up with the features offered by its more mainstream rivals...

NATS Server Access Control Error Vulnerability

NATS Server is an open source messaging system. The system is mainly used for cloud-native applications, IoT messaging and microservices architecture. An access control error vulnerability exists in NATS Server 2.x before 2.2.0 and JWT library before 2.0.1, which stems from improper handling of...

Cisco Jabber for Windows DoS

The vulnerability of the Cisco Jabber for Windows software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure by sending specially crafted XMPP messages...

Cisco Jabber for Windows Privilege Escalation

The vulnerability of the Cisco Jabber for Windows software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, access confidential information, intercept secure network traffic, or cause service...

NATS Messaging Service Resource Consumption DoS

The vulnerability of the NATS messaging system server is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Mojo messaging library Google Chrome Confidential Data Compromise

The vulnerability of the Mojo messaging library in Google Chrome browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

CVE-2021-21332 Cross-site scripting (XSS) vulnerability in the password reset endpoint

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...

Slack hurries to fix direct message flaw that allowed harassment

The enormous work messaging platform Slack quickly reversed course yesterday, promising to revise a brand-new direct message feature that could have been misused for harassment. Added to the company’s “Slack Connect” product—which lets enterprise users share messages with contract workers and...

Cisco Jabber for Windows security vulnerabilities

Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. Cisco Jabber suffers from a code execution vulnerability that stems from an email content validation error. An attacker could exploit thi...

Tibco Software TIBCO Software FTL security vulnerability

Tibco Software TIBCO Software FTL is an application-to-application messaging system from TIBCO Software USA. A security vulnerability exists in TIBCO Software FTL, which can be exploited by an attacker to insert malicious software...

Tibco Software TIBCO Software FTL security vulnerability

Tibco Software TIBCO Software FTL is an application-to-application messaging system from TIBCO Software USA. A security vulnerability exists in TIBCO Software FTL, which can be exploited by a low-privileged attacker to insert malware...

Easy SMS Hijacking

Vice is reporting on a cell phone vulnerability caused by commercial SMS services. One of the things these services permit is text message forwarding. It turns out that with a little bit of anonymous money -- in this case, $16 off an anonymous prepaid credit card -- and a few lies, you can forwar...

Police credit “unlocked” SKY ECC encryption for organized crime bust

At the moment, I’m really torn, and I need your help. Let me tell you what is going on. I read these statements and they can’t both be true, right? “The continuous monitoring of the illegal Sky ECC communication service tool by investigators in three countries has provided invaluable insights int...

CVE-2021-21265

creationtimestamp| type| source ---|---|--- 2021-03-11 00:53:24+00:00| seen| https://t.me/cibsecurity/24743...

Pivotal Software RabbitMQ code-related vulnerabilities

Pivotal Software RabbitMQ is a suite of open source message broker software from Pivotal Software, USA that implements the Advanced Message Queuing Protocol AMQP. A code issue vulnerability exists in JMS Client on RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0, which stems from vulnerability to...

CVE-2021-26857

Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: wvu-r7 at March 03, 2021 6:59pm UTC reported: As per Microsoft’s blog post on Exchange Server 0day use by the HAFNIUM actors, CVE-2021-26857 is a deserialization vulnerability in Exchange Server’s Unified Messaging...

Unified Messaging service Microsoft Exchange Server Code Execution

The vulnerability of the Unified Messaging service on Microsoft Exchange Server is related to deficiencies in the data deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...