Cisco SD-WAN vManage Authentication Bypass Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An authentication bypass vulnerability exists in the Web Messaging Service interface of Cisco SD-WAN vManage, which can be exploited by an...

Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

CVE-2021-1520

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system OS. This vulnerability exists because an interna...

PT-2021-2973

Name of the Vulnerable Software and Affected Versions BroadWorks Messaging Server affected versions not specified Description The issue is related to the improper restriction of XML external entity references in the web-based management interface of the BroadWorks Messaging Server. This could all...

Cisco BroadWorks Messaging Server 代码问题漏洞

Cisco BroadWorks Messaging Server is a database server from the American company Cisco Cisco. An XML external entity injection vulnerability exists in Cisco BroadWorks Messaging Server version 22.0. The vulnerability stems from the program not properly handling XML External Entity XXE entries whe...

PT-2021-2984 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software, which could allow an unauthenticated, remote attacker to execute arbitrary code, gain access to...

PT-2021-2982 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to insufficient authorization checks in the web-based messaging service interface of Cisco SD-WAN vManage Software. This could allow an...

Cisco SD-WAN vManage Software 安全漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An authentication bypass vulnerability exists in the Web Messaging Service interface of Cisco SD-WAN vManage, which can be exploited by an...

The vulnerability of the Internet Messaging API component for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Internet Messaging API component for Windows operating systems is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Telegram Platform Abused in 'ToxicEye' Malware Campaigns

Hackers are leveraging the popular Telegram messaging app by embedding its code inside a remote access trojan RAT dubbed ToxicEye, new research has found. A victim’s computer infected with the ToxicEye malware is controlled via a hacker-operated Telegram messaging account. The ToxicEye malware ca...

Telegram 安全漏洞

Telegram is an instant messaging mobile application. A denial of service vulnerability exists in the MtProtoKitFramework of the Telegram app for iOS version 7.6.2. An authenticated, remote attacker can exploit the vulnerability to cause a denial of service...

CVE-2020-28141

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

CVE-2020-28141

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

Design/Logic Flaw

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

CVE-2020-28141

CVE-2020-28141 affects Online Discussion Forum 1.0. The vulnerability is a reflected/stored XSS in the message body: an authenticated attacker can send messages containing JavaScript to other users, which executes when those users view the messages page. Sources in the connected documents confirm...

CVE-2020-28141

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

PT-2021-11448

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum version 1.0 Description: The messaging subsystem is susceptible to a cross-site scripting XSS issue in the message body, allowing an authenticated user to send messages containing javascript code that executes when the...

CVE-2020-28141: Improper Neutralization of Input During Web Page Generation

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...

CVE-2021-28826

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker...

Design/Logic Flaw

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker wit...