PT-2023-18166 · Messaging · Messaging

Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to improper input validation in the Messaging application, which could lead to a remote denial of service. No additional execution privileges are needed, and user...

Researchers Uncover Wiretapping of XMPP-Based Instant Messaging Service

New findings have shed light on what's said to be a lawful attempt to covertly intercept traffic originating from jabber.ru aka xmpp.ru, an XMPP-based instant messaging service, via servers hosted on Hetzner and Linode a subsidiary of Akamai in Germany. "The attacker has issued several new TLS...

The vulnerability of the cloud-based messaging and streaming transmission platform Apache Pulsar, related to authentication procedures that lack sufficient protection, allows attackers to compromise the integrity of the protected information.

The vulnerability of the cloud-based messaging and streaming communication platform Apache Pulsar is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

Design/Logic Flaw

RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service DoS attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...

Apache ActiveMQ Remote Code Execution Vulnerability (CNVD-2023-80853)

Apache ActiveMQ is the United States Apache Apache Foundation of a set of open source messaging middleware , which supports Java messaging services , clustering , Spring Framework and so on. Apache ActiveMQ remote code execution vulnerability , when an unauthenticated attacker can use the...

Fedora: Security Advisory for matrix-synapse (FEDORA-2023-954c2ec5bd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Spring AMQP RabbitMQ messaging application, related to deserialization mechanism flaws, allows attackers to gain unauthorized access to message writing operations in RabbitMQ.

The vulnerability of the Spring AMQP RabbitMQ messaging application is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to write messages to RabbitMQ...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line that originates in the applet CHRISTINA JAPAN Line version v.13.6.1 that allows remote attackers to obtain sensitive information via a crafted GET request...

Line Security Breach

Line is an instant messaging platform from Line, Inc. Line suffers from a security vulnerability that originates in the applet rmc R Beauty CLINIC Line version v.13.6.1 which allows remote attackers to obtain sensitive information via a crafted GET request...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that originates in the applet Anglaise Company Anglaise.Company v.13.6.1 version allows remote attackers to obtain sensitive information via a crafted GET request...

[SECURITY] Fedora 37 Update: matrix-synapse-1.80.0-7.fc37

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

[SECURITY] Fedora 38 Update: matrix-synapse-1.94.0-2.fc38

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

CVE-2023-43658

dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. Improper escaping of event titles could lead to Cross-site Scripting XSS within the 'email preview' UI when a site has CSP disabled. Having CSP...

Signal Zero-Day Vulnerability Rumors Refuted by Company

By Deeba Ahmed Zero-Day Scare: Signal Messaging App Emerges Unscathed After Thorough Probe. This is a post from HackRead.com Read the original post: Signal Zero-Day Vulnerability Rumors Refuted by Company...

The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.

The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service-related data. Exploiting this vulnerability could allow an attacker to disclose protected information...

yhz66 Sandbox Information Disclosure Vulnerability

yhz66 Sandbox is an encrypted pure intranet instant messaging software from China Cloud Box yhz66. An information disclosure vulnerability exists in yhz66 Sandbox version 6.1.0, which stems from the presence of an information disclosure vulnerability...