UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in Messaging. An attacker could exploit this vulnerability to cause information leakage...

Google Makes it Tough for Rogue App Developers Get Back on Android Play Store

Even after Google's security oversight over its already-huge Android ecosystem has evolved over the years, malware apps still keep coming back to Google Play Store. Sometimes just reposting an already detected malware app from a newly created Play Store account, or using other developers' existin...

PT-2018-12690

Name of the Vulnerable Software and Affected Versions Hitachi Command Suite version 8.5.3 Description An Information Exposure issue was discovered, allowing a remote attacker to potentially exploit a flaw in the permission of messaging. This could enable information exposure via a crafted message...

PT-2011-2851

Name of the Vulnerable Software and Affected Versions Drupal Messaging module versions 6.x-2.x before 6.x-2.4 Drupal Messaging module versions 6.x-4.x before 6.x-4.0-beta8 Description A cross-site scripting XSS issue exists in the Messaging module for Drupal, allowing remote attackers with...

CVE-2011-1066: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Messaging module 6.x-2.x before 6.x-2.4 and 6.x-4.x before 6.x-4.0-beta8 for Drupal allows remote attackers with administer messaging permissions to inject arbitrary web script or HTML via unspecified vectors...