CVE-2026-37468

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component...

CVE-2026-37468

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component...

CVE-2026-37468

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component...

PT-2026-133715

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component...

CVE-2026-37468

A Cross Site Scripting (XSS) vulnerability exists in BeeHome MyBeeHome (versions prior to 2025-11-01 ). This flaw allows a remote attacker to execute arbitrary code by targeting the Profile editing functionality within the chat messaging component . While the vulnerability is confirmed via variou...

BeyondTrust Remote Support (RS) <= 26.2.3 Improper Origin Validation (BT26-05)

The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 26.2.3. It is, therefore, potentially affected by an improper origin validation vulnerability: - The internal messaging component of BeyondTrust Remote Support RS does not adequately validate the origin o...

EUVD-2004-2413

Malware in sbrugna...

Devolutions Server Access Control Vulnerability

Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server versions 2025.2.4.0 and earlier and 2025.1.11.0 and earlier, which stems from improper access contro...

Chamilo LMS security vulnerabilities

Chamilo LMS is an open source online learning and collaboration system from Chamilo Open Source. The system supports the creation of instructional content, remote training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version 1.11.28, which stems from th...

CVE-2023-40642

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

PT-2022-14662 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue involves an unauthorized broadcast in the Messaging component, potentially leading to a Local Deny of Service. Recommendations: For Android versions prior to the fixed version...

PT-2022-14463 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the Messaging component, allowing the attachment of private files to SMS messages. This could lead to local information disclosure without requiring...

Messaging Component Code Execution

The vulnerability of the messaging component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

Google Chrome Messaging Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Messaging component of Google Chrome versions prior to 102.0.5005.61, which arises from a mix-up in the instructions responsible for freeing memory in the Messaging component program...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Messaging component of Google Chrome versions prior to 102.0.5005.61, which arises from a mix-up in the instructions responsible for freeing memory in the Messaging component program...

PT-2022-2798

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.61 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the messaging component of the browsers, which can lead to heap corruption. This...

MESSAGING SAP_XIAF Disclosure Information

The vulnerability of the MESSAGING and SAPXIAF components of the SAP NetWeaver Process Integration software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

PT-2017-2879

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to insufficient access control in the Android operating system's messaging component. It may allow a remote attacker to cause a denial of service. Recommendations For Android...

Android Data Access

The vulnerability of the AOSP Messaging component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to data beyond their authorized levels of permission, using a specially crafted file...

RHEL 6 : Red Hat Enterprise MRG Messaging 2.3 (RHSA-2013:0562)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0562 advisory. Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased...