5068 matches found
Firestarter Android Malware Abuses Google Firebase Cloud Messaging
An APT group is starting fires with a new Android malware loader, which uses a legitimate Google messaging service to bypass detection. The malware, dubbed “Firestarter,” is used by an APT threat group called “DoNot.” DoNot uses Firebase Cloud Messaging FCM, which is a cross-platform cloud soluti...
Improper Use Of Flawed Policy
openstack-selinux is using flawed policy. policy flaw allows dbus messaging...
DoNot’s Firestarter abuses Google Firebase Cloud Messaging to spread
By Warren Mercer, Paul Rascagneres and Vitor Ventura. The newly discovered Firestarter malware uses Google Firebase Cloud Messaging to notify its authors of the final payload location.Even if the command and control C2 is taken down, the DoNot team can still redirect the malware to another C2 usi...
openstack-selinux: policy flaw allows dbus messaging
An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation. A non-root attacker in one or more Red Hat OpenStack RHOSP containers could send messages to the dbus. With access to the dbus, t...
Open-Xchange OX App Suite Server-Side Request Forgery Vulnerability
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A server-side request forgery vulnerability exists in OX App Suite 7.10.3 and earlier versions. An attacker can...
Akamai Edge Cloud: Scaling IoT, Part 2
IoT has tremendous possibilities to transform our world but will fall short of expectations if the underlying infrastructure cannot support the rapid exchange of massive amounts of information from billions of simultaneous and intermittent connections. Akamai Edge Cloud is designed to enable the...
Experts Warn of Privacy Risks Caused by Link Previews in Messaging Apps
Cybersecurity researchers over the weekend disclosed new security risks associated with link previews in popular messaging apps that cause the services to leak IP addresses, expose links sent via end-to-end encrypted chats, and even unnecessarily download gigabytes of data stealthily in the...
CVE-2020-15002
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API...
CVE-2020-15002
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API...
Server side request forgery (ssrf)
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API...
CVE-2020-15002
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API...
Vulnerabilities fixed in Oracle Communications-producton
Oracle has fixed vulnerabilities in Communications Messaging Server. The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS...
VulnCheck KEV: CVE-2017-6327
Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions...
Online Discussion Forum Site 1.0 - XSS in Messaging System
Exploit Title: Online Discussion Forum Site 1.0 - XSS in Messaging System Google Dork: N/A Date: 2020-10-17 Exploit Author: j5oh Vendor Homepage: https://www.sourcecodester.com/php/14233/online-discussion-forum-site.html Software Link:...
Online Discussion Forum Site 1.0 Cross Site Scripting
Exploit Title: Online Discussion Forum Site 1.0 - XSS in Messaging System Google Dork: N/A Date: 2020-10-17 Exploit Author: j5oh Vendor Homepage: https://www.sourcecodester.com/php/14233/online-discussion-forum-site.html Software Link:...
OX App Suite / OX Documents 7.10.3 XSS / Server-Side Request Forgery
Product: OX App Suite / OX Documents Vendor: OX Software GmbH Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.2, 7.10.3 Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev29, 7.10.3-rev15 Vendor notificatio...
The vulnerability in the web interface of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager call processing system, and the integrated Cisco Unity Connection messaging system allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the Web interface of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Unified Communications Manager IM & Presence Service, and the integrated Cisco Unity Connection messaging system is related to the lack of...
The vulnerability of the MESSAGING and SAP_XIAF components of the software for integrating corporate applications in SAP NetWeaver Process Integration allows a hacker to disclose protected information.
The vulnerability of the MESSAGING and SAPXIAF components of the SAP NetWeaver Process Integration software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
Moderate: Red Hat Security Advisory: Red Hat AMQ Broker 7.4.5 release and security update
Red Hat AMQ Broker 7.4.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Facebook Small Business Grants Spark Identity-Theft Scam
Cybercriminals are exploiting a $100 million Facebook grant program designed for small businesses impacted by the pandemic, to phish personal information and take over Facebook accounts. The perpetrators are trying to dupe people into thinking that the social network is handing out free money to...