CVE-2021-38709

In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staffmessaging messaging system for XSS...

Ocproducts Composr CMS 跨站脚本漏洞

Ocproducts Composr CMS is an open source content management system CMS written in PHP by ocProducts UK. A cross-site scripting vulnerability exists in ocProducts Composr CMS versions prior to 10.0.38, which allows an attacker to trigger the vulnerability by injecting JavaScript via the...

PT-2021-22270

Name of the Vulnerable Software and Affected Versions ocProducts Composr CMS versions prior to 10.0.38 Description The issue allows an attacker to inject JavaScript via the staff messaging messaging system, resulting in a cross-site scripting XSS attack. This can potentially lead to unauthorized...

CVE-2021-34535

creationtimestamp| type| source ---|---|--- 2021-08-12 05:09:51+00:00| seen| Telegram/ubkV9PLRwrywo4REyzAYJ2ZF4euM1xsCFWwIIuV0f6OI4y-W 2021-12-05 13:31:08+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4903 2022-05-06 11:09:45+00:00| published-proof-of-concept|...

CVE-2021-37180

creationtimestamp| type| source ---|---|--- 2021-08-10 14:37:06+00:00| seen| https://t.me/cibsecurity/27046...

MGASA-2021-0390 Updated rabbitmq-server packages fix security vulnerabilities

Updated rabbitmq-server packages fix security vulnerabilities: RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP...

Messaging Apps Have an Eavesdropping Problem

Vulnerabilities in Signal, Facebook Messenger, Google Duo, and more all point to a pervasive privacy issue...

Paragon: Yet Another Cyberweapons Arms Manufacturer

Forbes has the story: Paragons product will also likely get spyware critics and surveillance experts alike rubbernecking: It claims to give police the power to remotely break into encrypted instant messaging communications, whether thats WhatsApp, Signal, Facebook Messenger or Gmail, the industry...

Telegram Cross-Site Scripting Vulnerability

Telegram is an instant messaging mobile application. version 0.6.1 of Telegram Web K Alpha is vulnerable to a cross-site scripting vulnerability that stems from the fact that Telegram Web K Alpha allows XSS to pass through document names. An attacker could exploit the vulnerability to execute...

[SECURITY] Fedora 34 Update: matrix-synapse-1.38.1-1.fc34

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

Fedora: Security Advisory for matrix-synapse (FEDORA-2021-a627cfd31e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-36091

creationtimestamp| type| source ---|---|--- 2021-07-26 12:41:10+00:00| seen| https://t.me/cibsecurity/26472...

Fortics sz.chat has an unspecified vulnerability

Fortics sz.chat is a messaging app from the Brazilian company Fortics. version 4 of Fortics sz.chat has a security vulnerability that could be exploited by attackers to inject web script and HTML into the message box...

Fortics sz.chat 跨站脚本漏洞

Fortics sz.chat is a messaging app from the Brazilian company Fortics. version 4 of Fortics sz.chat has a security vulnerability that could be exploited by attackers to inject web script and HTML into the message box...

CVE-2021-32750

MuWire is a file publishing and networking tool that protects the identity of its users by using I2P technology. Users of MuWire desktop client prior to version 0.8.8 can be de-anonymized by an attacker who knows their full ID. An attacker could send a message with a subject line containing a URL...

CVE-2021-32750

MuWire is a file publishing and networking tool that protects the identity of its users by using I2P technology. Users of MuWire desktop client prior to version 0.8.8 can be de-anonymized by an attacker who knows their full ID. An attacker could send a message with a subject line containing a URL...

Design/Logic Flaw

MuWire is a file publishing and networking tool that protects the identity of its users by using I2P technology. Users of MuWire desktop client prior to version 0.8.8 can be de-anonymized by an attacker who knows their full ID. An attacker could send a message with a subject line containing a URL...

CVE-2021-32750

MuWire is a file publishing and networking tool that protects the identity of its users by using I2P technology. Users of MuWire desktop client prior to version 0.8.8 can be de-anonymized by an attacker who knows their full ID. An attacker could send a message with a subject line containing a URL...

CVE-2021-32750 De-anonymization via message

MuWire is a file publishing and networking tool that protects the identity of its users by using I2P technology. Users of MuWire desktop client prior to version 0.8.8 can be de-anonymized by an attacker who knows their full ID. An attacker could send a message with a subject line containing a URL...

Denial of Service Vulnerability in WiseFaFa Chat Tool

WiseFaFaFa Chat Tool is a free instant messaging software. It has features such as instant messaging, automatic creation of business groups and business organization structure. A denial-of-service vulnerability exists in Huicong Fafa Chat Tool, which can be exploited by attackers to cause a...