32 matches found
Incorrect Authorization
Overview github.com/nats-io/nats-server/v2/server is an A simple, secure and performant communications system for digital systems, services and devices. Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of access control in the $MQTT. namespac...
Malicious code in messaging-client-lite (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5436 Malicious code in messaging-client-lite (npm)
The package communicates with a domain associated with malicious activity...
CVE-2019-20138
creationtimestamp| type| source ---|---|--- 2024-03-18 11:21:07+00:00| seen| https://t.me/ctinow/210383...
Malicious code in n-messaging-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a7dbe95def0d204c9533eba028f108451dd6ce16866266114b1cf2cd1cfb4c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Solaris 10 (sparc) : 119548-14
GNOME 2.6.0: Gnome Multi-protocol instant messaging client Patch. Date this patch was last updated by Sun : Dec/14/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Local Buffer Overflow Vulnerability Exists in AuxCom
HelpEIM WinEIM is an enterprise instant messaging software. A local buffer overflow vulnerability exists in the folder handling in the WinEIM software client, which can lead to arbitrary code execution if an attacker disguises a malformed folder and tempts the user to parse it e.g., tricking the...
Debian DSA-3806-1 : pidgin - security update
It was discovered a vulnerability in Pidgin, a multi-protocol instant messaging client. A server controlled by an attacker can send an invalid XML that can trigger an out-of-bound memory access. This might lead to a crash or, in some extreme cases, to remote code execution in the client-side...
EveryBuddy 0.4.3 Long Message Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8343/info EveryBuddy is prone to a denial of service vulnerability when handling instant messages of excessive length. This could be exploited with a malicious instant messaging client. This condition may be due to a buff...
Slackware Advisory SSA:2004-026-01 GAIM security update
The remote host is missing an update as announced via advisory SSA:2004-026-01. OpenVAS Vulnerability Test $Id: esoftslkssa200402601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
[SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-2102-1 [email protected] http://www.debian.org/security/ Sébastien Delafond Sep 3, 2010 http://www.debian.org/security/faq - -...
Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...
Pidgin < 2.6.1 Multiple Vulnerabilities
The version of Pidgin installed on the remote host is earlier than 2.6.1. Such versions are reportedly affected by one or more of following issues : - The Yahoo protocol plugin may crash when receiving an IM from any user that contains a URL. CVE-2009-3025 - The XMPP protocol plugin can be tricke...
openSUSE Security Update : psi (psi-574)
Remote attackers could crash the Psi instant messaging client via the file transfer port CVE-2008-6393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update psi-574. The text description of this...
Solaris Update for Gnome Multi-protocol instant messaging client 119549-13
Check for the Version of Gnome Multi-protocol instant messaging client OpenVAS Vulnerability Test Solaris Update for Gnome Multi-protocol instant messaging client 119549-13 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...
Solaris Update for Gnome Multi-protocol instant messaging client 119549-13
Check for the Version of Gnome Multi-protocol instant messaging client OpenVAS Vulnerability Test Solaris Update for Gnome Multi-protocol instant messaging client 119549-13 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...
Debian Security Advisory DSA 1805-1 (pidgin)
The remote host is missing an update to pidgin announced via advisory DSA 1805-1. OpenVAS Vulnerability Test $Id: deb18051.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1805-1 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
openSUSE 10 Security Update : psi (psi-6042)
Remote attackers could crash the Psi instant messaging client via the file transfer port CVE-2008-6393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update psi-6042. The text description of this...
CentOS Update for pidgin CESA-2008:0584 centos3 x86_64
Check for the Version of pidgin OpenVAS Vulnerability Test CentOS Update for pidgin CESA-2008:0584 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Miranda IM多个远程栈溢出漏洞
BUGTRAQ ID: 26115 CVECAN ID: CVE-2007-5542,CVE-2007-5543 Miranda IM是Microsoft Windows平台上使用的开源多协议即时消息客户端。 Miranda IM没有正确地实现雅虎通协议,如果向客户端发送了畸形的雅虎通报文的话,就可以触发栈溢出,导致执行任意指令。 Miranda Miranda IM 0.7 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://sourceforge.net/project/showfiles.php?groupid=94142...