21721 matches found
Design/Logic Flaw
The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
UBUNTU-CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service DoS attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API...
Design/Logic Flaw
The leakage of the client secret in Fukunagamemberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
Design/Logic Flaw
The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
Design/Logic Flaw
The leakage of the client secret in UomasaSaijinews Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
Design/Logic Flaw
The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
Design/Logic Flaw
The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
Design/Logic Flaw
The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...
CVE-2023-45851
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI devi...
Bosch ctrlX HMI Web Panel WR21 Access Control Error Vulnerability
Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. A security vulnerability exists in the ctrlX HMI Web Panel WR21 version, which originates from a vulnerability that allows an attacker to force an Android Agent application to connect to a malicious MQTT proxy and send a fake...
PT-2023-29731 · Google · Android Client
Name of the Vulnerable Software and Affected Versions: Android Client affected versions not specified Description: The issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker. This enables the attacker to send fake messages to the HMI device, as the...
Fedora 38 : roundcubemail (2023-955e390a13)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-955e390a13 advisory. Version 1.6.4 - Fix PHP8 warnings 9142, 9160 - Fix default 'mime.types' path on Windows 9113 - Managesieve: Fix javascript error when relational or spamtest...
RabbitMQ Resource Management Error Vulnerability
RabbitMQ is a feature-rich multi-protocol messaging and streaming agent from RabbitMQ open source. RabbitMQ has a security vulnerability that stems from the HTTP API does not enforce HTTP request body restrictions and is vulnerable to denial of service DoS attacks with oversized messages...
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service DoS attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API...
K000137315: ZebOS BGP vulnerability CVE-2023-45886
Security Advisory Description The BGP daemon bgpd in ZebOS through 7.10.6 allows remote attackers to cause a denial-of-service DoS by sending crafted BGP update messages containing a malformed attribute. CVE-2023-45886 Impact This vulnerability may allow a remote unauthenticated attacker to cause...
A Controversial Plan to Scan Private Messages for Child Abuse Meets Fresh Scandal
An EU government body is pushing a proposal to combat child sexual abuse material that has significant privacy implications. Its lead advocate is making things even messier...
Cross-site Scripting (XSS)
modoboa is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the listen function of twocolsnav.js due to improper handling of profile forms when displaying error messages which allows an attacker to inject and execute arbitrary JavaScript...
CVE-2023-39740
The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...