610 matches found
CVE-2020-10857
Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution...
CVE-2020-10858
Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...
CVE-2020-10858
Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...
CVE-2020-10857
Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution...
Cross site request forgery (csrf)
Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...
CVE-2020-10857
Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution...
CVE-2020-10857
Zulip Desktop (Windows/macOS/Linux) has a remote code execution vulnerability in all versions before 5.0.0. The issue stems from improper use of shell.openExternal and shell.openItem with untrusted content, which can allow an attacker to execute arbitrary code on the user’s system. The Red Hat an...
CVE-2020-10858
Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...
CVE-2020-10858
Zulip Desktop before 5.0.0 is affected by a permission handling flaw that allows recording via the webcam and microphone. The issue arises from a missing permission request handler, enabling potential abuse without requiring user interaction. Public sources in the connected data consistently desc...
Zulip Desktop 安全漏洞
Zulip Desktop is a desktop version of the team chat application from Zulip USA. An authorization issue vulnerability exists in versions prior to Zulip Desktop 5.0.0, which stems from allowing an attacker to record from a webcam and microphone because of an unprivileged request processor...
Zulip Desktop 安全漏洞
Zulip is a powerful open source group chat application that combines the immediacy of live chat with the productivity benefits of threaded conversations.Zulip Desktop is the Zulip desktop client. A remote code execution vulnerability exists in Zulip Desktop versions prior to 5.0.0. The...
Kenzer - Automated Web Assets Enumeration And Scanning
Automated Web Assets Enumeration & Scanning Instructions for running 1. Create an account on Zulip 2. Navigate to Settings Your Bots Add a new bot 3. Create a new generic bot named kenzer 4. Add all the configurations in configs/kenzer.conf 5. Install/Run using - ./install.sh -b if you need...
RUSTSEC-2020-0073 Mutable reference with immutable provenance
A mutable reference to a struct was constructed by dereferencing a pointer obtained from slice::asptr. Instead, slice::asmutptr should have been called on the mutable slice argument. The former performs an implicit reborrow as an immutable shared reference which does not allow writing through the...
Zulip Desktop Cross-Site Scripting Vulnerability (CNVD-2020-51791)
Zulip Desktop is a desktop version of the team chat application from Zulip USA. A cross-site scripting vulnerability exists in Zulip Desktop. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...
CVE-2020-24582
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface...
CVE-2020-24582
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface...
Cross site scripting
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface...
CVE-2020-24582
Zulip Desktop prior to version 5.4.3 is affected by a cross-site scripting (XSS) vulnerability. The issue arises from mishandled string escaping during the construction of the HTML for the user interface, enabling injection of malicious content in the desktop client. The CVE entry covers this as ...