Tigase XMPP Server - Exposure Detection

Detects Tigase XMPP Server - Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Tigase XMPP Server - Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tigase XMPP Server - Exposure Detection',...

EUVD-2014-2773

Malware in sbrugna...

Tigase XMPP Server Stanza Smuggling

Tigase XMPP server: XMPP stanza smuggling via unescaped qutes Tigase XMPP server suffers from a security vulnerability due to not escaping double quote character when serializing parsed XML. This can be used to "smuggle" or, if you prefer, inject arbitrary attacker-controlled stanza in the XMPP...

CVE-2014-2746

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

Code injection

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

CVE-2014-2746

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

CVE-2014-2746

The CVE-2014-2746 issue affects Tigase before version 5.2.1, where net/IOService.java inadequately restricts processing of compressed XML elements. This allows remote attackers to trigger resource consumption and potential denial of service via a crafted XMPP stream (xmppbomb). The vulnerability ...

CVE-2014-2746

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

PT-2014-4901

Name of the Vulnerable Software and Affected Versions Tigase versions prior to 5.2.1 Description The issue allows remote attackers to cause a denial of service due to excessive resource consumption via a crafted XMPP stream, also known as an "xmppbomb" attack. This occurs because the...

CVE-2014-2746: Undefined Security Weakness

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

CVE-2012-4670

Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

Server side request forgery (ssrf)

Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-4670

Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-4670

Tigase XMPP Server prior to 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, enabling remote XMPP servers to spoof domains via a Verify Response or an Authorization Response. Affected product: Tigase XMPP Server (versions before 5.1.0). Root cause: missing verif...

PT-2012-5537

Name of the Vulnerable Software and Affected Versions Tigase XMPP Server versions prior to 5.1.0 Description The issue allows remote XMPP servers to spoof domains via a Verify Response or Authorization Response, due to the lack of verification that a request was made for an XMPP Server Dialback...

CVE-2012-4670: Improper Input Validation

Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...