CVE-2018-14867

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters...

CVE-2018-14867

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters...

CVE-2018-14867

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters...

CVE-2018-14867: Improper Access Control

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters...

PT-2019-9065

Name of the Vulnerable Software and Affected Versions Odoo Community versions 9.0 through 10.0 Odoo Enterprise versions 9.0 through 10.0 Description The issue is related to incorrect access control in the portal messaging system, allowing remote attackers to post messages on behalf of customers a...

Symantec Messaging Gateway Privilege Escalation

SUMMARY Symantec has released an update to address an issue that was discovered in the Symantec Messaging Gateway SMG product. AFFECTED PRODUCTS Symantec Messaging Gateway SMG --- CVE | Affected Versions | Remediation CVE-2019-12751 | Prior to 10.7.1 | Upgrade to 10.7.1 ISSUES CVE-2019-12751 ---...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

Cross site request forgery (csrf)

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

CVE-2018-17387

CVE-2018-17387 affects Nimble Messaging Bulk SMS Marketing Application 1.0. The issue is a Cross-Site Request Forgery (CSRF) that enables adding an admin account. CVSS3 base score 8.8 (HIGH) with NETWORK attack vector, UI required, and HIGH impact on confidentiality, integrity, and availability. ...

PT-2019-9459

Name of the Vulnerable Software and Affected Versions Nimble Messaging Bulk SMS Marketing Application version 1.0 Description The issue concerns a CSRF problem that allows for the addition of an admin account. Recommendations For Nimble Messaging Bulk SMS Marketing Application version 1.0, consid...

CVE-2018-17387: Cross-Site Request Forgery (CSRF)

CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account...

Fedora Update for dbus FEDORA-2019-d5ded5326b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: dbus-1.12.16-1.fc30

D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...

PYSEC-2019-129

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

Telegram Suffers 'Powerful DDoS Attack' From China During Hong Kong Protests

Telegram, one of the most popular encrypted messaging app, briefly went offline yesterday for hundreds of thousands of users worldwide after a powerful distributed denial-of-service DDoS attack hit its servers. Telegram founder Pavel Durov later revealed that the attack was mainly coming from the...

Telegram Suffers 'Powerful DDoS Attack' From China During Hong Kong Protests

Telegram, one of the most popular encrypted messaging app, briefly went offline yesterday for hundreds of thousands of users worldwide after a powerful distributed denial-of-service DDoS attack hit its servers. Telegram founder Pavel Durov later revealed that the attack was mainly coming from the...

Telegram messaging service hit by massive DDoS attack

By Waqas It is unclear why Telegram was targeted or who was behind the DDoS attack. The popular privacy-focused instant messaging application service Telegram has suffered a massive DDoS attack in which its service in the United States and several other countries has been disrupted, the company h...

mybb -- vulnerabilities

mybb Team reports: High risk: Theme import stylesheet name RCE High risk: Nested video MyCode persistent XSS Medium risk: Find Orphaned Attachments reflected XSS Medium risk: Post edit reflected XSS Medium risk: Private Messaging folders SQL injection Low risk: Potential phar deserialization...