EUVD-2019-3445

Malware in sbrugna...

GHSA-5HX7-77G4-WQX3 Incorrect Authorization

Versions of aedes before 0.35.1 does not respect its own authorization rules when a client sets a Last Will...

CVE-2019-11778

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which h...

DEBIAN-CVE-2019-11778

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which h...

Unauthorized Access Vulnerability in Baidu's Skyworks Intelligence Platform

Baidu Tiangong Intelligence Platform is a cloud service platform for the IoT field, which communicates through mainstream IoT protocols e.g., MQTT, allowing IoT projects to be built between smart devices and the cloud. The Baidu Tiangong Intelligent Platform suffers from an unauthorized access...

Improper Authorization in aedes

Versions of aedes before 0.35.1 does not respect its own authorization rules when a client sets a Last Will. Recommendation Update to version 0.35.1 or later...

GHSA-4CMX-HRQ9-C23P Improper Authorization in aedes

Versions of aedes before 0.35.1 does not respect its own authorization rules when a client sets a Last Will. Recommendation Update to version 0.35.1 or later...

Improper Authorization

Overview Versions of aedes before 0.35.1 does not respect its own authorization rules when a client sets a Last Will. Recommendation Update to version 0.35.1 or later. References - GitHub Issue 211 - GitHub Issue 212 - GitHub Advisory...

PT-2018-16196 · Mosquitto · Aedes

Name of the Vulnerable Software and Affected Versions: aedes versions prior to 0.35.1 Description: The issue is related to improper authorization, where aedes does not respect its own authorization rules when a client sets a Last Will. This can lead to publishing a Last Will and Testament LWT in ...