5049 matches found
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Messaging. An attacker could exploit this vulnerability to cause information leakage...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Messaging. An attacker could exploit this vulnerability to cause information leakage...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Messaging. An attacker could exploit this vulnerability to cause information leakage...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Messaging. An attacker could exploit this vulnerability to cause information leakage...
White Supremacist Active Clubs Are Breeding on Telegram
A “friendlier” front for racist extremism has spread rapidly across the US in recent months, as active club channels network on Telegram's encrypted messaging app...
PT-2023-27563 · Messaging · Messaging
Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...
PT-2023-27566 · Messaging · Messaging
Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...
PT-2023-27562 · Messaging · Messaging
Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...
Fedora: Security Advisory for matrix-synapse (FEDORA-2023-84ee781688)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-27569 · Messaging · Messaging
Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...
PT-2023-27565 · Messaging · Messaging
Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...
PT-2023-27568 · Messaging · Messaging
Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...
[SECURITY] Fedora 38 Update: matrix-synapse-1.93.0-2.fc38
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
[SECURITY] Fedora 37 Update: matrix-synapse-1.80.0-6.fc37
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
ChainLink should be used as an Oracle for messaging instead of Google Cloud
Lines of code Vulnerability details Impact Each User Application contract e.g. BranchBidgeAgent built on LayerZero will work without configuration using defaults, but a UA will also be able to configure its own. Maia intends to use the default config. However, Google Cloud Oracle is the default a...
Fedora: Security Advisory for matrix-synapse (FEDORA-2023-5d980e6aaf)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Lack of force resume support for LZ which is crucially important to have
Lines of code Vulnerability details Impact The User Application LZReceiver should implement the ILayerZeroUserApplicationConfig interface which includes the forceResumeReceive function. This is very important as in the worst case, it can allow the owner to unblock the queue of messages if somethi...
The vulnerability of the EMUI messaging module of the HarmonyOS operating system allows a hacker to compromise the confidentiality of the protected information.
The vulnerability of the EMUI messaging module of the HarmonyOS operating system is related to the use of a weak encryption mechanism when sending 5G messages. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the information being protected...
A malicious user can spam ghost deposits to DoS the LayerZeroEndpoint messaging layer
Lines of code Vulnerability details Impact There can be many deposits that will strain the messaging layer, especially in chains that do not cost much to send a transaction. Proof of Concept The entry point of the bridge is callOutSignedAndBridge in BranchBridgeAgent.sol. This function will pack...