Red Hat WildFly Information Disclosure Vulnerability (CNVD-2020-67088)

Red Hat Wildfly is the United States Red Hat Red Hat, Inc. of a lightweight JavaEE-based open source application server . An information disclosure vulnerability exists in versions prior to WildFly 21.0.0, which stems from a resource adapter logging plain-text JMS passwords at the warning level a...

Red Hat Wildfly 日志信息泄露漏洞

Red Hat Wildfly is the United States Red Hat Red Hat, Inc. of a lightweight JavaEE-based open source application server . An information disclosure vulnerability exists in versions prior to WildFly 21.0.0, which stems from a resource adapter logging plain-text JMS passwords at the warning level a...

Android messaging app with 100M users found exposing messages

By Sudais Asif According to the Play Store, the Go SMS Pro app is highly popular among Android users with more than 100 million users. This is a post from HackRead.com Read the original post: Android messaging app with 100M users found exposing messages...

WARNING: Unpatched Bug in GO SMS Pro App Exposes Millions of Media Messages

GO SMS Pro, a popular messaging app for Android with over 100 million installs, has been found to have an unpatched security flaw that publicly exposes media transferred between users, including private voice messages, photos, and videos. "This means any sensitive media shared between users of th...

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) system, related to an exception handling error, allows a violator to trigger a service failure.

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P system is related to an exception handling error. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

Debian DLA-2443-1 : zeromq3 security update

It was discovered that ZeroMQ, a lightweight messaging kernel library does not properly handle connecting peers before a handshake is completed. A remote, unauthenticated client connecting to an application using the libzmq library, running with a socket listening with CURVE...

CVE-2020-27694

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 has updated a specific critical library that may vulnerable to attack...

CVE-2020-27019

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker to access a specific database and key...

CVE-2020-27017

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 is vulnerable to an XML External Entity Processing XXE vulnerability which could allow an authenticated administrator to read arbitrary local files. An attacker must already have obtained product administrator/root privileges to...

CVE-2020-27016

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 is vulnerable to a cross-site request forgery CSRF vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must...

CVE-2020-27693

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 stores administrative passwords using a hash that is considered outdated...

Trend Micro Interscan Messaging Security Virtual Appliance (IMSVA) Detection Consolidation

Consolidation of Trend Micro Interscan Messaging Security Virtual Appliance IMSVA detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2020-3588

CVE-2020-3588 affects Cisco Webex Meetings Desktop App for Windows in virtual desktop environments. The root cause is improper validation of messages processed by the virtualization channel interface, allowing a local attacker with limited privileges to execute arbitrary code with the user’s priv...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) XXE Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. A XXE vulnerability exists in the Trend Micro InterScan Messaging Security Virtual Appliance IMSVA. An attacker can exploit the vulnerability to read arbitrary local file...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Resource Management Error Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is vulnerable to a resource management error. No details of the vulnerability are available at this time...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Resource Management Error Vulnerability (CNVD-2021-08549)

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is vulnerable to a resource management error. No details of the vulnerability are available at this time...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Information Disclosure Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. The Trend Micro InterScan Messaging Security Virtual Appliance IMSVA suffers from an information disclosure vulnerability that originates from an error in configuration o...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Cross-Site Request Forgery Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. The Trend Micro InterScan Messaging Security Virtual Appliance IMSVA suffers from a cross-site request forgery vulnerability that arises from a web application that does...

WhatsApp Is Adding Disappearing Messages—With Some Limits

The popular encrypted messaging app now lets you automatically make chats vanish after a week, but look out for a few caveats...

Google Firebase cloud messaging abused to spread Android malware

By Waqas Dubbed Firestarter by researchers; the Android malware campaign is exploiting the Kashmir issue between India and Pakistan but its target remains the Pakistani government, noted Cisco Talos researchers. Cisco Talos researchers have discovered that the APT threat group DoNot exploits...