5056 matches found
[SECURITY] Fedora 26 Update: mosquitto-1.4.12-1.fc26
Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application, which allows an attacker to execute arbitrary code.
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
CVE-2016-8939
creationtimestamp| type| source ---|---|--- 2017-06-03 04:20:58+00:00| seen| https://t.me/informationsecuritychannel/5643...
zeffertt.co.uk XSS vulnerability
Vulnerable URL: http://www.zeffertt.co.uk/torvy/message.php?to=torven=messaging2=descendancy.php%3Fged%3Dzeff.ged=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E=hepqmct9afjk7p0gbt76jkhp32 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...
May 25, 2017—KB4020102 (OS Build 15063.332)
None None...
Trend Micro InterScan Messaging Security Suite Directory Traversal Vulnerability
Trend Micro InterScan Messaging Security Suite is a hybrid SaaS email security solution from Trend Micro. A directory traversal vulnerability exists in Trend Micro InterScan Messaging Security Suite, which originates when the program fails to adequately validate user-supplied input. An attacker...
The US Senate Is Using Signal
The US Senate just approved Signal for staff use. Signal is a secure messaging app with no backdoor, and no large corporate owner who can be pressured to install a backdoor. Susan Landau comments. Maybe I'm being optimistic, but I think we just won the Crypto War. A very important part of the US...
SQL Injection Vulnerability in the id parameter of cmpp2.jsp file of Ecommerce's customer management platform
Enterprise letter is the use of java development of a special tailored to the enterprise customer value-added SMS business, enterprise customers in the use of computers at the same time can be completed with the production of office combined with the internal SMS communication. SQL injection...
SQL Injection Vulnerability in the Content Parameter of smsreportxiang.jsp File on ECS Customer Management Platform
Enterprise letter is the use of java development of a special tailored to the enterprise customer value-added SMS business, enterprise customers in the use of computers at the same time can be completed with the production of office combined with the internal SMS communication. SQL injection...
Symantec Messaging Gateway Remote Code Execution
This module exploits the command injection vulnerability of Symantec Messaging Gateway product. An authenticated user can execute a terminal command under the context of the web server user which is root. backupNow.do endpoint takes several user inputs and then pass them to the internal service...
Beware! New Android Malware Infected 2 Million Google Play Store Users
Initially thought to be 600,000 users, the number of Android users who have mistakenly downloaded and installed malware on their devices straight from Google Play Store has reached 2 Million. Yes, about 2 Million Android users have fallen victim to malware hidden in over 40 fake companion guide...
Symantec Messaging Gateway < 10.6.2 RAR File Parser DoS Vulnerabilities
Symantec Messaging Gateway is prone to denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Trend Micro InterScan Messaging Security Virtual Appliance Cross-Site Scripting Vulnerability (CNVD-2017-05670)
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an email gateway security appliance from Trend Micro that integrates anti-virus, anti-spyware and anti-phishing technologies to provide comprehensive protection for email applications. A cross-site scripting vulnerability exists ...
CVE-2017-7896
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 before CP 1644 has XSS...
CVE-2017-7896
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 before CP 1644 has XSS...
CVE-2016-5312
Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...
Directory traversal
Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...
CVE-2016-5312
Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...
CVE-2016-5312
A directory traversal in the sn parameter of com.ve.kavachart.servlet.ChartStream affects Symantec Messaging Gateway before 10.6.2, allowing authenticated low-privilege users to read arbitrary server files. A public exploit (Exploit-DB 40437) exists; patch to 10.6.2 per Symantec advisory SYM16-016.