303 matches found
UBUNTU-CVE-2025-3645
A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...
CVE-2025-3645 Moodle: idor in messaging web service allows access to some user details
A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...
PT-2025-17920
Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in the messaging web service of Moodle, where insufficient capability checks allowed users to view other users' names and online statuses. Recommendations At the moment, there...
The vulnerability of the Core Messaging service in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Core Messaging service in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
USN-7243-1 vlc vulnerability
It was discovered that VLC incorrectly handled memory when reading an MMS stream. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...
Encrypted messaging service intercepted, 2.3 million messages read by law enforcement
European law enforcement agencies have taken down yet another encrypted messaging service mainly used by criminals. The Matrix encrypted messaging service was an invite-only service which was also marketed under the names Mactrix, Totalsec, X-quantum, or Q-safe. Dutch and French authorities start...
The vulnerability of the MMS multimedia library protocol in FFmpeg, related to reading data beyond the buffer’s allowed limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the MMS protocol in the FFmpeg multimedia library relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program
Cybersecurity researchers have gleaned additional insights into a nascent ransomware-as-a-service RaaS called Cicada3301 after successfully gaining access to the group's affiliate panel on the dark web. Singapore-headquartered Group-IB said it contacted the threat actor behind the Cicada3301...
Malicious code in platform-client-messaging-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c2d8c135637c1c5dabdcf9238f0a282f34540de11eca662db70ccadf8260ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8036 Malicious code in platform-client-messaging-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c2d8c135637c1c5dabdcf9238f0a282f34540de11eca662db70ccadf8260ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the MMS processor in the VideoLAN VLC media player software allows a hacker to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the MMS processor in the VideoLAN VLC media player lies in the possibility of buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information by downloading specially...
CVE-2023-43998
An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
The vulnerability of the Windows Message Queuing system, which allows a perpetrator to disclose protected information
The vulnerability of Windows’ Message Queuing service stems from deficiencies in the access control mechanism. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...
Signal is testing usernames so you don’t have to share your phone number
Messaging service Signal is testing support for usernames as a replacement for phone numbers to serve as user identities. Signal provides encrypted instant messaging and is popular among people that value their privacy. Compared to more popular services like WhatsApp, Signal offers more layers of...
CVE-2023-3769
Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication,...
Ingeteam Ingepac Da Au Input Validation Error Vulnerability
Ingeteam Ingepac Da Au is an affordable solution from Ingeteam. for complete measurement and detection of fault bypasses anywhere in the grid. Ingeteam Ingepac Da Au has an input validation error vulnerability that stems from the presence of an incorrect data input validation vulnerability that...
CVE-2023-30919
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-30921
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
