29614 matches found
CVE-2025-6226 IDOR in CreatePost API allows for timeboxed message disclosure
Mattermost versions 10.5.x = 10.5.6, 10.8.x = 10.8.1, 10.7.x = 10.7.3, 9.11.x = 9.11.16 fail to verify authorization when retrieving cached posts by PendingPostID which allows an authenticated user to read posts in private channels they don't have access to via guessing the PendingPostID of...
CVE-2025-6226 IDOR in CreatePost API allows for timeboxed message disclosure
Mattermost versions 10.5.x = 10.5.6, 10.8.x = 10.8.1, 10.7.x = 10.7.3, 9.11.x = 9.11.16 fail to verify authorization when retrieving cached posts by PendingPostID which allows an authenticated user to read posts in private channels they don't have access to via guessing the PendingPostID of...
USN-7647-1 ledgersmb vulnerabilities
It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could possibly use this issue to send a maliciously crafted URL to the server and obtain sensitive information, or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubun...
CVE-2024-42650
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...
glib: buffer overflow in set_connect_msg()
A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...
CVE-2025-52687
creationtimestamp| type| source ---|---|--- 2025-07-16 07:29:10+00:00| seen| Telegram/JQr-qg-HSxLaEgjFwrPGHNrT8xVRvpQqwn17i0uGuKjXawM...
CVE-2024-42649
NanoMQ v0.22.10 was discovered to contain a memory leak which allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...
p5-Authen-SASL -- Insecure source of randomness
p5-Authen-SASL project reports: Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce client nonce is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and...
CVE-2024-42650
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...
glib: buffer overflow in set_connect_msg()
A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...
PT-2025-29575 · Nanomq · Nanomq
Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.5 Description: NanoMQ version 0.17.5 contains a segmentation fault in the /nanomq/pub handler.c component. Attackers can exploit this issue by sending a crafted PUBLISH message, leading to a Denial of Service DoS...
The vulnerability of the SMB protocol implementation of the IBM Storage Scale cluster file system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SMB protocol implementation in the IBM Storage Scale cluster file system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
USN-7636-1 roundcube vulnerability
It was discovered that Roundcube Webmail incorrectly handled sanitization in the messagebody function. A remote attacker could possibly use this issue to send and receive emails as another user...
Exploit for Cross-site Scripting in Maptiler Tileserver_Php
CVE-2025-44136 Unauthenticated XSS in MapTiler Tileserver-php...
glib: buffer overflow in set_connect_msg()
A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...
PT-2025-29486 · Nanomq · Nanomq
Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.21.10 Description: A segmentation fault in NanoMQ version 0.21.10 allows attackers to cause a Denial of Service DoS via crafted messages. Recommendations: At the moment, there is no information about a newer version that...
CVE-2024-42649
NanoMQ v0.22.10 was discovered to contain a memory leak which allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...
The vulnerability in the implementation of the SMB protocol in Microsoft Windows operating systems allows a hacker to perform a spoofing attack.
The vulnerability of the SMB protocol implementation in Microsoft Windows is related to errors in the authentication process. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...
Secure and Efficient Quantum Signature Scheme Based on the Controlled Unitary Operations Encryption
Quantum digital signatures ensure unforgeable message authenticity and integrity using quantum principles, offering unconditional security against both classical and quantum attacks. They are crucial for secure communication in high-stakes environments, ensuring trust and long-term protection in...