voron-crypto

Библиотека криптографии/протокола Voron — запрос на ревью Это ядро криптографии и протокола обмена сообщениями небольшого проекта E2EE-мессенджера, выделенное для внешнего ревью. Это не весь продукт — клиент для Android и конфигурация развёртывания намеренно оставлены за бортом; это только та...

Joomla! Harmis Messenger 1.2.2 - Local File Inclusion

Joomla! Harmis Messenger 1.2.2 is vulnerable to local file inclusion which could give an attacker read access to arbitrary files. id: CVE-2019-9922 info: name: Joomla! Harmis Messenger 1.2.2 - Local File Inclusion author: 0xAkoko severity: high description: Joomla! Harmis Messenger 1.2.2 is...

Giga Messenger WordPress - Cross-Site Scripting

Giga Messenger WordPress plugin = 2.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE через SQL-инъекцию Уязвимость SQL-инъекции в BigAnt Messenger приводит к уязвимости RCE. Следуйте шагам для эксплуатации. Usage: root@kitploit: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help показать это справочное сообщение и...

cve-2020-27358-27359

CVE-2020-27358 / CVE-2020-27359 Этапы эксплуатации для CVE-2020-27358 и CVE-2020-27359 CVE-2020-27358 Проблема была обнаружена в REDCap 8.11.6 – 9.x до версии 10. Функция CSV в мессенджере позволяющая пользователям экспортировать свои цепочки сообщений в CSV позволяет непривилегированным...

CVE-2022-26629

Lock Screen Bypass CVE-2022-26629 影響を受ける製品 SoroushPlus+ Messenger 1.0.30 脆弱性の種類 不適切なアクセス制御 影響 ロック画面バイパス 概要 不十分な権限および特権の不適切な処理により、攻撃者はロック画面の機能を変更・上書きでき、いかなる認可もなしにロック画面をバイパスすることが可能になります。 悪用 BypassLockScreen.py 自動エクスプロイト PoC 1. BypassLockScreen.py をお使いの SoroushPlus+ インストールディレクトリに配置し、 2. Python3...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

CVE-2025-49091-Gajim-RCE

CVE-2025-49091 - Python Proof of Concept Эксплойт proof-of-concept PoC для CVE-2025-49091 для зашифрованного мессенджера Gajim. Обнаружено независимо Патриком Птаком SivertPL и Деннисом Дастом, эксплойт — Патрик Птак. Файлы CVE-2025-49091.py – PoC на Python. Использование root@kitploit: python3...

hermes-the-messenger

Hermes il messaggero Una PoC per ottenere persistenza tramite notifiche push su Windows Per maggiori dettagli tecnici e contesto leggi il nostro post sul blog qui: https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence Uso Prima di tutto devi...

exploits

exploits Le PoC pubblicate sono disponibili su exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the net/ceph/messengerv2.c file within the Linux kernel before version 6.4.5. There is an integer signedness error, which leads to a buffer overflow and remote code execution via the HELLO command or one of the AUTH frames. This occurs due to an untrusted length value...

The vulnerability of the process_v2_sparse_read() function in the net/ceph/messenger_v2.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the processv2sparseread function in the net/ceph/messengerv2.c kernel module of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2026-68156

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

DEBIAN-CVE-2026-68156

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

UBUNTU-CVE-2026-68156

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

CVE-2026-68156 libceph: refresh auth->authorizer_buf{,_len} after authorizer update

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

CVE-2026-68156 libceph: refresh auth->authorizer_buf{,_len} after authorizer update

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

CVE-2017-3652

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:45+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-07-30 00:02:02+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-08-01 14:00:04+00:00| seen|...

The vulnerability of the process_auth_done() function in the net/ceph/messenger_v2.c module, which is part of the Linux kernel’s networking functions, allows a malicious actor to gain access to protected information or cause service failures remotely.

The vulnerability of the processauthdone function in the net/ceph/messengerv2.c module, which is part of the Linux kernel’s networking functions, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or...

EUVD-2018-21883

Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entries using a constant encryption key. Attackers can inject malicious database records into the application's database files to unloc...