7 matches found
CVE-2021-33896
Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...
CVE-2019-16235
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280messagecarbons.vala...
EUVD-2021-20569
Malware in sbrugna...
Ubuntu 20.04 LTS / 22.04 LTS : Dino vulnerability (USN-7430-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7430-1 advisory. Kim Alvefur discovered that Dino did not correctly sanitize certain messages. A remote attacker could possibly use this issue to leak sensitive...
USN-7430-1: Dino vulnerability
Kim Alvefur discovered that Dino did not correctly sanitize certain messages. A remote attacker could possibly use this issue to leak sensitive information...
Dino security vulnerabilities
Dino is an open source chat client application for desktop from the DINO team. Dino suffers from a security vulnerability that originates from allowing an attacker to modify the personal bookmark store via a constructed message. The vulnerability can be exploited to trick victims into disclosing...
