CVE-2023-45321

The Android Client application, when enrolled with the define method 1 the user manually inserts the server ip address, use HTTP protocol to retrieve sensitive information ip address and credentials to connect to a remote MQTT broker entity instead of HTTPS and this feature is not configurable by...

EUVD-2011-2898

Malware in sbrugna...

qpid-cpp-server-cluster: unauthorized broker access caused by the use of NullAuthenticator catch-up shadow connections

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication...

CVE-2011-2925

CVE-2011-2925 affects Red Hat Enterprise MRG Grid 2.0 (and related Messaging/Realtime components). The root cause is that Cumin logs broker authentication credentials to its log file, allowing a local user to bypass authentication and perform actions on jobs and queues via a direct broker connect...