136 matches found
CVE-2022-23605
Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...
Cross-Site Request Forgery (CSRF) in gunet/openeclass
Description No CSRF is provided when deleting messages. Proof of Concept The attacker could delete a specific message as they are generated consecutively and brute forcing it. history.pushState'', '', '/' or the could just delete all the messages: history.pushState'', '', '/' Impact Combining thi...
Rocket.Chat: Messages can be hidden regardless of server configuration
Vulnerability description not provided...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability exists in v2.0.0 in videolist.php, which can let a malicious user delete a video message...
Cross-Site Request Forgery (CSRF) in tsolucio/corebos
✍️ Description Attacker able to delete any Message with CSRF attack because there is any CSRF protection for related endpoint. It does not matter at all that your application run in localhost or elsewhere, just it is enough to run on a browser and another low privilege user or attackers know the I...
Cybozu Garoon message deletion vulnerability
A message deletion vulnerability exists in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to delete workflow routing information without the appropriate privileges...
Cybozu Garoon 输入验证错误漏洞
A message deletion vulnerability exists in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to delete workflow routing information without the appropriate privileges...
Moodle 安全漏洞
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from insufficient permission checking when deleting messages. A remote user can...
CVE-2020-35687
PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim. Recent assessments: oosman-rak at January 20, 2021 4:08am UTC reported: Assessed Attacker Value: 3 Assessed Attacker Value: 3Assessed Attacker...
CVE-2018-4313
CVE-2018-4313 concerns a consistency issue in how application snapshots are handled in Messages, allowing a local user to potentially discover a user’s deleted messages. The issue affected iOS prior to 12, tvOS prior to 12, and watchOS prior to 5. Apple documented the vulnerability in its securit...
Wickr Inc - App Clock & Message Deletion Glitch P2
Document Title: =============== Wickr Inc - App Clock & Message Deletion Glitch P2 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2107 Document: https://www.vulnerability-lab.com/resources/documents/2107.rar Vulnerability Magazine:...
CVE-2017-2707
Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...
CVE-2017-2707
Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...
Privilege escalation
Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...
Security Advisory - Privilege Escalation Vulnerability in Push Module of Huawei Smart Phone
There is a privilege escalation vulnerability in Push module of Huawei Smart Phone. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message. Vulnerability ID: HWPSIRT-2017-05070...
LocalTapiola: CSRF allows attacker to delete item from customer's "Postilaatikko"
Description If the customer navigates to the CSRF-attack page shortly after viewing any message details on the "Postilaatikko", the last item that was viewed by the customer will be deleted. Please see the attached video for an illustration of the bug. Steps to reproduce 1. Log in to the...
[SECURITY] Fedora 21 Update: imapsync-1.644-2.fc21
imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...
Ecmall Sql 注入 第一枚。
简要描述： 打了补丁试试。 详细说明： 在app/message.app.php中 function drop $msgids = isset$GET'msgid' ? trim$GET'msgid' : ''; if !$msgids $this-showwarning'nosuchmessage'; return; $msgids = explode',',$msgids; $modmessage = &m'message'; foreach $msgids as $key=$msgid $message = $modmessage-findintval$msgid; $messag...
[SECURITY] Fedora 20 Update: imapsync-1.584-1.fc20
imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...
shopex ctl. member. php file SQL injection vulnerability-vulnerability warning-the black bar safety net
Issql injectionvulnerability testing version: shopex-singel-4.8.5.78660 File:\core\shop\controller\ctl.member.php function delTrackMsg if! empty$POST'deltrack' $oMsg = &$this-system-loadModel'resources/msgbox'; $oMsg-delTrackMsg$POST'deltrack'; $this-splash'success',...