RHSA-2024:0617

creationtimestamp| type| source ---|---|--- 2024-01-30 17:16:16+00:00| seen| https://t.me/ctinow/176085...

CVE-2023-51888

creationtimestamp| type| source ---|---|--- 2024-01-24 19:26:50+00:00| seen| https://t.me/ctinow/173021 2024-02-05 17:17:07+00:00| seen| https://t.me/ctinow/179347 2024-02-18 08:41:11+00:00| seen| https://t.me/ctinow/187174...

CVE-2023-49622

creationtimestamp| type| source ---|---|--- 2024-01-04 15:21:37+00:00| seen| https://t.me/ctinow/163037 2024-01-05 01:33:15+00:00| seen| https://t.me/cibsecurity/74406 2024-01-10 08:16:21+00:00| seen| https://t.me/ctinow/165603...

CVE-2023-32874

creationtimestamp| type| source ---|---|--- 2024-01-02 04:26:48+00:00| seen| https://t.me/ctinow/161469 2024-01-03 01:30:57+00:00| seen| https://t.me/cibsecurity/74124...

SUSE CVE-2023-28366

The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because of mishandling of EAGAIN from the libc send function...

DEBIAN-CVE-2023-28366

The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because of mishandling of EAGAIN from the libc send function...

The vulnerability of extension XEP-0308: Last Message Correction for the Jabber/XMPP client Gajim, which allows a violator to trigger a service failure.

The vulnerability of extension XEP-0308, “Last Message Correction” for the Jabber/XMPP client Gajim, is related to insufficient validation of input data during the verification of message identifiers in a multi-user chat. Exploiting this vulnerability can allow a malicious actor, operating...

CVE-2022-34295

totd before 1.5.3 does not properly randomize mesg IDs...

totd 安全特征问题漏洞

totd is a small DNS proxy nameserver by the individual developer F.W. Dillema. A security vulnerability exists in versions of totd prior to 1.5.3, which stems from the application's inability to randomize message IDs...

CVE-2020-17438

creationtimestamp| type| source ---|---|--- 2020-12-12 02:36:05+00:00| seen| https://t.me/cibsecurity/20659 2020-12-12 02:39:06+00:00| seen| https://t.me/cibsecurity/20679 2020-12-12 03:25:30+00:00| seen| https://t.me/cibsecurity/20699 2020-12-12 04:07:19+00:00| seen| https://t.me/cibsecurity/207...

CVE-2020-9484

creationtimestamp| type| source ---|---|--- 2020-06-04 13:51:41+00:00| published-proof-of-concept| https://t.me/cKure/776 2020-06-04 15:34:17+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6476 2020-06-04 15:34:54+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/431...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...