332 matches found
CVE-2020-25019
jitsi-meet-electron aka Jitsi Meet Electron before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances...
CVE-2020-25019
CVE-2020-25019 affects jitsi-meet-electron (Jitsi Meet Electron) up to version 2.3.0. The vulnerability arises when the Electron shell.openExternal function is invoked without verifying that the target URL is http or https, in certain circumstances. Impact details are not fully elaborated in the ...
CVE-2020-25019: Insufficient Verification of Data Authenticity
jitsi-meet-electron aka Jitsi Meet Electron before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances...
crosleyrepros.com Cross Site Scripting vulnerability OBB-1273669
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-15894
Name of the Vulnerable Software and Affected Versions jitsi-meet-electron versions prior to 2.3.0 Description The issue arises when the Electron shell.openExternal function is called without verifying that the URL is for an http or https resource, under certain circumstances. Recommendations For...
8x8 Docker Jitsi Meet Trust Management Issues Vulnerability
8x8 Docker Jitsi Meet is a tool for building Jitsi Meet video conferencing solutions in Docker from 8x8 USA. A security vulnerability exists in previous versions of 8x8 Docker Jitsi Meet docker-jitsi-meet stable-4384-1, which stems from the use of default passwords e.g. passw0rd for system...
CVE-2020-11878
The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...
CVE-2020-11878
The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...
Default credentials
The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...
CVE-2020-11878
The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...
CVE-2020-11878
CVE-2020-11878 affects the Jitsi Meet docker-jitsi-meet stack prior to stable-4384-1, where system accounts used default passwords (e.g., passw0rd). The vulnerability is documented across multiple sources (NVD/Red Hat/CNVD/OSV), with high to critical severity in CVSS metrics. Impact is authentica...
CVE-2020-11878: Use of Hard-coded Credentials
The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...
PT-2020-12912
Name of the Vulnerable Software and Affected Versions Jitsi Meet aka docker-jitsi-meet versions prior to stable-4384-1 Description The issue concerns the use of default passwords for system accounts in the Jitsi Meet stack on Docker. Specifically, default passwords such as passw0rd are used. Ther...
meet-a-cougar.com XSS vulnerability
Open Bug Bounty ID: OBB-594066 Description| Value ---|--- Affected Website:| meet-a-cougar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
meet-i.com XSS vulnerability
Open Bug Bounty ID: OBB-451586 Description| Value ---|--- Affected Website:| meet-i.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
csh.rit.edu XSS vulnerability
Open Bug Bounty ID: OBB-278313 Description| Value ---|--- Affected Website:| csh.rit.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Girls Who Code Summer Immersion Program - Week One
Written by Lisa Adams The Girls Who Code Summer Immersion program at Akamai Technologies is off to a great start! During Week 1 we welcomed the class of 20 girls and the teaching team of three instructors from Girls Who Code. The girls began learning how to program in the Scratch language, and...
SayHi Chat, Love, Meet, Dating - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application SayHi Chat, Love, Meet, Dating published at the 'play' market has multiple vulnerabilities...
Couplemaker Dating - Chat Meet - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Couplemaker Dating - Chat Meet published at the 'play' market has multiple vulnerabilities...
IFY - Chat & Meet New People - Customized SSL, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application IFY - Chat & Meet New People published at the 'play' market has multiple vulnerabilities...