21795 matches found
CVE-2022-26269
Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...
Code injection
Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...
CVE-2022-26269
Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...
CVE-2022-26269
CVE-2022-26269 affects Suzuki Connect v1.0.15. The vulnerability enables an attacker to tamper with messages displayed by the system through spoofed CAN messages, compromising integrity of user-visible information. The available sources consistently describe the issue as a message-tampering vulne...
Draytek多款产品格式化字符串错误漏洞
DrayTek Vigor is a router. a format string vulnerability exists in DrayTek Vigor, which can be exploited by remote attackers to execute arbitrary code via specially crafted HTTP messages containing malformed query strings...
Suzuki Connect 安全漏洞
Suzuki Connect is a web-based solution from Suzuki Japan. It is used to obtain vehicle information such as fuel, ignition status, current position, seat buckle status, and more. A security vulnerability exists in Suzuki Connect v1.0.15 that allows an attacker to tamper with displayed messages by...
Juniper Junos OS DoS (JSA11239)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11239 advisory. On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon RPD crash and...
The vulnerability of the Cisco Discovery Protocol Service network operating systems and Cisco NX-OS/FXOS routers allows a attacker to induce a service failure.
The vulnerability of the Cisco Discovery Protocol Service for network operating systems based on Cisco NX-OS and FXOS routers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending specially crafted malicious messages...
Facebook Instagram input validation error vulnerability
Instagram Photo Wall is a social app that runs on mobile and shares the pictures you snap with each other in a fast, wonderful and fun way.Facebook Instagram has an input validation error vulnerability that stems from the failure to properly present URI messages to users, which can be exploited b...
Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape the Message Subject field before outputting it in the Messages list, which could allow high privileges users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Add/Edit a message and put the following...
CVE-2020-20095
iMessage Messages app iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...
CVE-2020-20096
Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...
CVE-2020-20093
The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...
CVE-2020-20094
Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...
Code injection
Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...
CVE-2020-20095
CVE-2020-20095 affects iMessage (Messages app) on iOS 12.4 and earlier, where the user interface fails to correctly render URI messages, enabling URI spoofing via specially crafted messages. The vulnerability relates to how the app presents links, potentially misleading users about the actual des...
Meta Facebook Messenger 安全漏洞
Meta Facebook Messenger is an instant messaging software/application from Meta, Inc. that provides text and voice services. A security vulnerability exists in Meta Facebook Messenger that stems from an inability to properly present URI messages to the user, which could lead to URI spoofing via...
Meta Facebook Messenger 安全漏洞
Instagram Photo Wall is a social app that runs on mobile and shares the pictures you snap with each other in a fast, wonderful and fun way.Facebook Instagram has an input validation error vulnerability that stems from the failure to properly present URI messages to users, which can be exploited b...
Apple iMessage iOS 安全漏洞
Apple iMessage iOS is an instant messaging service from Apple Inc. in the United States. A security vulnerability exists in Apple iMessage iOS Messages app version 12.4, which stems from a failure of the user interface in iMessage Messages app iOS version 12.4 and earlier to properly present URI...
Meta Facebook Messenger 安全漏洞
Facebook WhatsApp is a suite of mobile applications from the American company Facebook that utilize the web to deliver text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, and more. Facebook WhatsApp suffers from a...