Lucene search
+L

7968 matches found

NVD
NVD
added 2025/09/02 8:15 p.m.13 views

CVE-2025-7974

rocket.chat Incorrect Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web...

7.5CVSS0.00412EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/02 7:46 p.m.28 views

CVE-2025-7974

CVE-2025-7974 affects rocket.chat. The vulnerability is an incorrect authorization flaw in the web service (listening on TCP port 3000 by default) that allows remote attackers to disclose sensitive information without authentication. The issue is documented with the ZDI advisory (ZDI-25-627) and ...

7.5CVSS5.9AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/02 7:46 p.m.18 views

CVE-2025-7974 rocket.chat Incorrect Authorization Information Disclosure Vulnerability

rocket.chat Incorrect Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web...

3.7CVSS0.00412EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/02 7:46 p.m.7 views

CVE-2025-7974 rocket.chat Incorrect Authorization Information Disclosure Vulnerability

rocket.chat Incorrect Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web...

3.7CVSS4.3AI score0.00412EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-6688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.11 prior to 16.11.2. A problem with the processing logic for Google Chat...

6.5CVSS5.2AI score0.00745EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/29 6:55 p.m.3 views

MAL-2025-41936 Malicious code in ai-dial-chat (npm)

The package ai-dial-chat was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/29 6:55 p.m.4 views

Malicious code in ai-dial-chat (npm)

The package ai-dial-chat was found to contain malicious code...

7AI score
SaveExploits0
NVD
NVD
added 2025/08/29 2:15 p.m.6 views

CVE-2025-9651

A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The manipulation of the argument userid results in sql injection. The attack may be performed from a remote location. The exploit has been made...

6.5CVSS0.00248EPSS
SaveExploits0References4
OSV
OSV
added 2025/08/28 7:15 a.m.13 views

MAL-2025-41470 Malicious code in @twork-data-services/communication-api-v4-communication-chat (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-6489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability was identified in GitLab CE/EE, versions 16.7.7 prior to 16.8.6, 16.9 prior to 16.9.4 and 16.10 prior to 16.10.2 which allows ...

6.5CVSS5.3AI score0.00601EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/25 6:32 p.m.5 views

MAL-2025-41843 Malicious code in @espace-client-axafr/chat-genesys-auth (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/08/25 12:00 a.m.10 views

Collaborative Intelligence: Topic Modelling of Large Language Model Use in Live Cybersecurity Operations

Objective: This work describes the topic modelling of Security Operations Centre SOC use of a large language model LLM, during live security operations. The goal is to better understand how these specialists voluntarily use this tool. Background: Human-automation teams have been extensively...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/24 2:30 p.m.7 views

CVE-2009-10006

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...

9.3CVSS7.4AI score0.00867EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2016-2087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. dot dot in the server nam...

7.4CVSS7.5AI score0.09524EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2018-9240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial ...

7.5CVSS7.3AI score0.01881EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/08/22 2:43 p.m.5 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the IRC client process when handling crafted numeric replies from an IRC server. An attacker can execute arbitrary code by sending a specially crafted 001 message during the automatic IRC connection proces...

9.8CVSS7.7AI score0.00867EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/22 2:07 p.m.14 views

CVE-2009-10006 UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...

9.3CVSS0.00867EPSS
SaveExploits0References6
CVE
CVE
added 2025/08/22 2:07 p.m.20 views

CVE-2009-10006

UFO: Alien Invasion (versions up to and including 2.2.1) contains a stack-based buffer overflow in the built-in IRC client component. When the client processes a crafted IRC 001 numeric reply during automatic IRC connection handling, the string length validation can overflow the stack, potentiall...

9.3CVSS7.6AI score0.00867EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.9 views

PT-2025-34366 · Unknown · Ufo: Alien Invasion

Name of the Vulnerable Software and Affected Versions: UFO: Alien Invasion versions up to and including 2.2.1 Description: UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow in its built-in IRC client component. When the client connects to an IRC server and receives ...

9.3CVSS7.3AI score0.00867EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.7 views

UFO: Alien Invasion 安全漏洞

UFO: Alien Invasion is a game by UFO: Alien Invasion. A security vulnerability exists in UFO: Alien Invasion 2.2.1 and earlier versions, which stems from a buffer overflow in the built-in IRC client component that could lead to the execution of arbitrary code...

9.3CVSS7.2AI score0.00867EPSS
SaveExploits0References8
Rows per page
Query Builder