NATS Server Access Control Error Vulnerability

NATS Server is an open source messaging system. The system is mainly used for cloud-native applications, IoT messaging and microservices architecture. An access control error vulnerability exists in NATS Server 2.x before 2.2.0 and JWT library before 2.0.1, which stems from improper handling of...

The vulnerability of the Cisco Jabber for Windows software platform, related to insufficient validation of input data, allows a perpetrator to trigger a service failure state.

The vulnerability of the Cisco Jabber for Windows software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure by sending specially crafted XMPP messages...

The vulnerability of the Cisco Jabber for Windows software platform lies in insufficient input data validation, which allows attackers to escalate their privileges, access confidential information, intercept secure network traffic, or cause service failures.

The vulnerability of the Cisco Jabber for Windows software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, access confidential information, intercept secure network traffic, or cause service...

The vulnerability of the Mojo messaging library in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Mojo messaging library in Google Chrome browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the NATS messaging system server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the NATS messaging system server is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

CVE-2021-21332 Cross-site scripting (XSS) vulnerability in the password reset endpoint

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...

Slack hurries to fix direct message flaw that allowed harassment

The enormous work messaging platform Slack quickly reversed course yesterday, promising to revise a brand-new direct message feature that could have been misused for harassment. Added to the company’s “Slack Connect” product—which lets enterprise users share messages with contract workers and...

Cisco Jabber for Windows 安全漏洞

Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. Cisco Jabber suffers from a code execution vulnerability that stems from an email content validation error. An attacker could exploit thi...

Tibco Software TIBCO Software FTL 安全漏洞

Tibco Software TIBCO Software FTL is an application-to-application messaging system from TIBCO Software USA. A security vulnerability exists in TIBCO Software FTL, which can be exploited by an attacker to insert malicious software...

Tibco Software TIBCO Software FTL 安全漏洞

Tibco Software TIBCO Software FTL is an application-to-application messaging system from TIBCO Software USA. A security vulnerability exists in TIBCO Software FTL, which can be exploited by a low-privileged attacker to insert malware...

Easy SMS Hijacking

Vice is reporting on a cell phone vulnerability caused by commercial SMS services. One of the things these services permit is text message forwarding. It turns out that with a little bit of anonymous money -- in this case, $16 off an anonymous prepaid credit card -- and a few lies, you can forwar...

Police credit “unlocked” SKY ECC encryption for organized crime bust

At the moment, I’m really torn, and I need your help. Let me tell you what is going on. I read these statements and they can’t both be true, right? “The continuous monitoring of the illegal Sky ECC communication service tool by investigators in three countries has provided invaluable insights int...

CVE-2021-21265

creationtimestamp| type| source ---|---|--- 2021-03-11 00:53:24+00:00| seen| https://t.me/cibsecurity/24743...

Pivotal Software RabbitMQ 代码问题漏洞

Pivotal Software RabbitMQ is a suite of open source message broker software from Pivotal Software, USA that implements the Advanced Message Queuing Protocol AMQP. A code issue vulnerability exists in JMS Client on RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0, which stems from vulnerability to...

The vulnerability of the Unified Messaging service on Microsoft Exchange Server allows a perpetrator to execute arbitrary code.

The vulnerability of the Unified Messaging service on Microsoft Exchange Server is related to deficiencies in the data deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2021-26857

Microsoft Exchange Server Remote Code Execution Vulnerability Recent assessments: wvu-r7 at March 03, 2021 6:59pm UTC reported: As per Microsoft’s blog post on Exchange Server 0day use by the HAFNIUM actors, CVE-2021-26857 is a deserialization vulnerability in Exchange Server’s Unified Messaging...

PT-2021-2213

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A flaw exists in Microsoft Exchange Server’s Unified Messaging service related to data deserialization. Successful exploitation could allow a remote attacker to execute...

The vulnerability of the CServerManager::HandleBrowseLoadIconStreamRequest function in the FactoryTalk Linx automation software allows a intruder to trigger a service failure.

The vulnerability of the CServerManager::HandleBrowseLoadIconStreamRequest function messaging.dll in the FactoryTalk Linx automation software is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a...

CVE-2021-21274

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead t...

Code injection

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead t...