5767 matches found
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line that originates in the applet CHRISTINA JAPAN Line version v.13.6.1 that allows remote attackers to obtain sensitive information via a crafted GET request...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...
Apache ActiveMQ Remote Code Execution Vulnerability (CNVD-2023-80853)
Apache ActiveMQ is the United States Apache Apache Foundation of a set of open source messaging middleware , which supports Java messaging services , clustering , Spring Framework and so on. Apache ActiveMQ remote code execution vulnerability , when an unauthenticated attacker can use the...
The vulnerability of the Spring AMQP RabbitMQ messaging application, related to deserialization mechanism flaws, allows attackers to gain unauthorized access to message writing operations in RabbitMQ.
The vulnerability of the Spring AMQP RabbitMQ messaging application is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to write messages to RabbitMQ...
Fedora: Security Advisory for matrix-synapse (FEDORA-2023-954c2ec5bd)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Line Security Breach
Line is an instant messaging platform from Line, Inc. Line suffers from a security vulnerability that originates in the applet rmc R Beauty CLINIC Line version v.13.6.1 which allows remote attackers to obtain sensitive information via a crafted GET request...
[SECURITY] Fedora 37 Update: matrix-synapse-1.80.0-7.fc37
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
[SECURITY] Fedora 38 Update: matrix-synapse-1.94.0-2.fc38
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
CVE-2023-43658
dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. Improper escaping of event titles could lead to Cross-site Scripting XSS within the 'email preview' UI when a site has CSP disabled. Having CSP...
Signal Zero-Day Vulnerability Rumors Refuted by Company
By Deeba Ahmed Zero-Day Scare: Signal Messaging App Emerges Unscathed After Thorough Probe. This is a post from HackRead.com Read the original post: Signal Zero-Day Vulnerability Rumors Refuted by Company...
The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.
The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service-related data. Exploiting this vulnerability could allow an attacker to disclose protected information...
yhz66 Sandbox Information Disclosure Vulnerability
yhz66 Sandbox is an encrypted pure intranet instant messaging software from China Cloud Box yhz66. An information disclosure vulnerability exists in yhz66 Sandbox version 6.1.0, which stems from the presence of an information disclosure vulnerability...
DarkGate Malware Spreading via Messaging Services Posing as PDF Files
A piece of malware known as DarkGate has been observed being spread via instant messaging platforms such as Skype and Microsoft Teams. In these attacks, the messaging apps are used to deliver a Visual Basic for Applications VBA loader script that masquerades as a PDF document, which, when opened,...
Microsoft Skype for Business Remote Code Execution Vulnerability (CNVD-2023-92200)
Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...
Microsoft Skype for Business Remote Code Execution Vulnerability
Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...
DarkGate Opens Organizations for Attack via Skype, Teams
We detail an ongoing campaign abusing messaging platforms Skype and Teams to distribute the DarkGate malware to targeted organizations. We also discovered that once DarkGate is installed on the victim’s system, additional payloads were introduced to the environment...
