EUVD-2015-3497

Malware in sbrugna...

Cross site scripting

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

CVE-2015-3454

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

CVE-2015-3454

TelescopeJS prior to version 0.15 leaks user bcrypt password hashes in websocket messages, which an attacker could obtain through a cross-site scripting attack. This is documented in CVE-2015-3454 (NVD). The available sources corroborate that the vulnerability involves leaking password hash data ...

CVE-2015-3454

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

CVE-2015-3454: Exposure of Sensitive Information to an Unauthorized Actor

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

TelescopeJS Password Hash Information Disclosure Vulnerability

TelescopeJS is a suite of open source social news applications. An information disclosure vulnerability exists in TelescopeJS, which allows remote attackers to exploit the vulnerability to obtain sensitive information about password hashes...