[SECURITY] Fedora 37 Update: dino-0.3.2-1.fc37

A modern XMPP "Jabber" chat client using GTK+/Vala...

[SECURITY] Fedora 36 Update: dino-0.3.2-1.fc36

A modern XMPP "Jabber" chat client using GTK+/Vala...

[SECURITY] Fedora 38 Update: dino-0.4.2-1.fc38

A modern XMPP "Jabber" chat client using GTK+/Vala...

MAL-2022-2987 Malicious code in fe-avaya-chat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad58ce0cefa333c185defb16a8c738dca22fbea13e605da6ea94772080dd4d4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-avaya-chat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad58ce0cefa333c185defb16a8c738dca22fbea13e605da6ea94772080dd4d4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the XMPP Dino chat client, related to deficiencies in path name limitation, allows attackers to compromise data integrity.

The vulnerability of the XMPP Dino chat client is related to a bug in URI-encoded path separators. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

Fedora: Security Advisory for dino (FEDORA-2021-3cf08ffe38)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: dino-0.2.1-1.fc34

A modern XMPP "Jabber" chat client using GTK+/Vala...

[SECURITY] Fedora 33 Update: dino-0.1.2-1.fc33

A modern XMPP "Jabber" chat client using GTK+/Vala...

Dino Path Traversal Vulnerability

Dino is an open source chat client application for desktop from the Dino DINO team. Dino suffers from a path traversal vulnerability that stems from Dino prior to 0.1.2 and 0.2 failing to properly filter for special elements in the path of a resource or file. An attacker could use this...

Dino 路径遍历漏洞

Dino is an open source chat client application for desktop from the Dino DINO team. Dino suffers from a path traversal vulnerability that stems from Dino prior to 0.1.2 and 0.2 failing to properly filter for special elements in the path of a resource or file. An attacker could use this...

Fedora Update for dino FEDORA-2019-2555c77f63

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: dino-0.0-0.12.20190912.git.a96c801.fc29

A modern XMPP "Jabber" chat client using GTK+/Vala...

Fedora Update for dino FEDORA-2019-0eb6d51f81

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: dino-0.0-0.13.20190912.git.a96c801.fc31

A modern XMPP "Jabber" chat client using GTK+/Vala...

Microsoft Exchange Spoofing Vulnerability

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...

Valve: code injection, steam chat client

The steam chat client allows oEmbed, apparently based on a whitelist. One of the whitelisted oEmbedis codepen. When a codepen is created, it can be sent as a link to another steam user, and the code inside the codepen will execute within the privileged Steam Chat context. You can send these codep...

Valve: XSS in steam react chat client

The Steam chat client both sends and receives bbcode format chat messages. These map to HTML elements, and notably the url bbcode tag is supported for arbitrary URLs. React has strong XSS mitigations but does not mitigate javascript: URI based XSS. This is rather difficult to exploit as the clien...

Microsoft Office Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing...

Microsoft Exchange Spoofing Vulnerability

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...