The vulnerability of the Windows Message Queuing system, which allows a perpetrator to disclose protected information

The vulnerability of Windows’ Message Queuing service stems from deficiencies in the access control mechanism. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Moderate: Red Hat Security Advisory: Red Hat AMQ Broker 7.11.5 release and security update

Red Hat AMQ Broker 7.11.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

What is Kafka?

Introduction to the Universe of Kafka: A Detailed Synopsis Apache Kafka, frequently just labeled as Kafka, is a universally contributed event broadcasting framework, intended to manage live streaming of data. It is engineered to be a bridge for significant volumes of data, offering a mechanism fo...

CVE-2024-20663

Windows Message Queuing Client MSMQC Information Disclosure...

CVE-2023-6980

WP SMS – Messaging & SMS Notification for WordPress plugin (WordPress, WooCommerce, GravityForms, etc.) up to version 6.5 is affected by Cross-Site Request Forgery due to missing/incorrect nonce validation on the delete action of the wp-sms-subscribers page. This allows unauthenticated attackers ...

WordPress Plugin WP SMS Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line Tamakihamanoki v.13.6.1. An attacker has exploited the vulnerability to send specially crafted notifications by revealing channel access tokens...

What is RabbitMQ?

Grasping the Basics: What is RabbitMQ? Take a step into the realm of software development, where efficient and smooth interaction between various applications is the linchpin. Here, we bring into the mix RabbitMQ. Going down to brass tacks, RabbitMQ serves as a no-cost message broker tool,...

CVE-2023-50572

creationtimestamp| type| source ---|---|--- 2023-12-29 16:26:42+00:00| seen| https://t.me/ctinow/160575 2023-12-30 01:42:33+00:00| seen| https://t.me/cibsecurity/73996 2024-01-21 16:41:55+00:00| seen| https://t.me/ctinow/170882...

CVE-2023-27447

CVE-2023-27447 affects VeronaLabs WP SMS – Messaging & SMS Notification for WordPress (WordPress WP SMS Plugin) up to version 6.0.4. The issue exposes sensitive information to an unauthenticated actor (information disclosure). Patch availability: fixed in 6.0.4.1; recommended action: update to a ...

The vulnerability of the sms_decode_address_field() function in the OFono mobile phone stack allows a hacker to execute arbitrary code.

The vulnerability of the smsdecodeaddressfield function in the OFono mobile phone stack is related to the execution of operations outside the buffer in memory when sending SMS messages in PDU format. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-25970

creationtimestamp| type| source ---|---|--- 2023-12-20 21:23:55+00:00| seen| https://t.me/ctinow/157314 2024-01-14 07:41:22+00:00| seen| https://t.me/ctinow/167947...

Rescan of Cloud Native Machines in Azure Fails After Credentials Change

Challenge After the Azure Storage account is changed, rescan of Cloud Native Agents e.g., Veeam Agent for Microsoft Windows , Veeam Agent for Linux fails with the error: Warning Failed to connect to Details: Azure REST API error. HTTP code: 403. Azure error: AuthenticationFailed. Full error:...

GHSA-CWH6-HM53-6W2M Missing access control in Silverpeas

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...

Missing access control in Silverpeas

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...

CVE-2023-47323

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...

CVE-2023-47323

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...

Privilege escalation

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...

CVE-2023-47323

CVE-2023-47323 affects Silverpeas Core 6.3.1: the notification/messaging API does not enforce access control on the ID parameter, enabling an attacker to read messages exchanged between users, including messages addressed to administrators. This is a confidentiality risk (C, HIGH impact) with CVS...

CVE-2023-47323

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...