Lucene search
+L

2400 matches found

NVD
NVD
added 2022/04/07 6:15 p.m.32 views

CVE-2021-43430

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...

8.8CVSS0.01128EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/07 6:15 p.m.19 views

Improper access control

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...

6.5CVSS8.6AI score0.01128EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/04/07 5:40 p.m.79 views

CVE-2021-43430

The CVE-2021-43430 vulnerability affects BigAntSoft BigAnt office messenger 5.6 via the im_webserver, described as an access-control flaw that could let a malicious user upload PHP Trojan files. The connected sources confirm the product and the attack vector (networks via im_webserver) and state ...

8.8CVSS8.6AI score0.01128EPSS
SaveExploits1References1Affected Software1
The Hacker News
The Hacker News
added 2022/04/07 11:33 a.m.25 views

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot. "SharkBot steals credentials and banking information," Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with T...

0.7AI score
SaveExploits0
CNNVD
CNNVD
added 2022/04/07 12:00 a.m.10 views

BigAntSoft BigAnt office messenger 代码问题漏洞

BigAntSoft BigAnt office messenger is a server/client instant messaging program for enterprise environments from BigAntSoft Australia. A security vulnerability exists in BigAntSoft BigAnt office messenger 5.6 that could allow a malicious user to upload a PHP Trojan horse file...

8.8CVSS8AI score0.01128EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2022/03/25 6:16 a.m.295 views

Exploit for Incorrect Authorization in Splus Soroushplus

Lock Screen Bypass CVE-2022-26629 Affected Products...

9.1CVSS9.4AI score0.03222EPSS
SaveExploits2
ATTACKERKB
ATTACKERKB
added 2022/03/24 4:15 p.m.15 views

CVE-2022-26629

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function...

9.1CVSS7.2AI score0.03222EPSS
SaveExploits2References3
NVD
NVD
added 2022/03/24 4:15 p.m.31 views

CVE-2022-26629

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function...

9.1CVSS0.03222EPSS
SaveExploits2References1
OSV
OSV
added 2022/03/24 4:15 p.m.6 views

CVE-2022-26629

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function...

9.1CVSS5.8AI score0.03222EPSS
SaveExploits2References1
Prion
Prion
added 2022/03/24 4:15 p.m.26 views

Security feature bypass

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function...

6.4CVSS9.1AI score0.03222EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2022/03/24 4:00 p.m.79 views

CVE-2022-26629

CVE-2022-26629 affects SoroushPlus+ Messenger 1.0.30. The issue is an Improper Access Control in the Lock Screen Security Feature caused by insufficient permissions/privileges, enabling a malicious actor to bypass the lock screen. Public references in connected sources include Red Hat advisory en...

9.1CVSS9.1AI score0.03222EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/03/24 4:00 p.m.47 views

CVE-2022-26629

An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privileges, which allows a malicious attacker bypass the lock screen function...

9.4AI score0.03222EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/03/24 12:00 a.m.9 views

SoroushPlus Messenger 访问控制错误漏洞

SoroushPlus Messenger is an instant messaging application by Setak Houshmand Sharif Personal Developer. SoroushPlus Messenger version 1.0.30 An Access Control Error vulnerability exists in the Lock Screen Security Feature feature, which stems from insufficient permissions and privileges, and an...

9.1CVSS8.3AI score0.03222EPSS
SaveExploits2References3
NVD
NVD
added 2022/03/23 10:15 p.m.37 views

CVE-2020-20093

The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

6.5CVSS0.0235EPSS
SaveExploits2References2
OSV
OSV
added 2022/03/23 10:15 p.m.9 views

CVE-2020-20093

The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

6.5CVSS6.6AI score0.0235EPSS
SaveExploits2References2
Prion
Prion
added 2022/03/23 10:15 p.m.30 views

Code injection

The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

4.3CVSS6.1AI score0.0235EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2022/03/23 9:27 p.m.150 views

CVE-2020-20093

CVE-2020-20093 affects the Facebook Messenger app for iOS (227.0 and earlier) and Android (228.1.0.10.116 and earlier). The issue is in how URI messages are presented to users; the UI fails to accurately display URIs, enabling URI spoofing via specially crafted messages. The NVD CVSS data indicat...

6.5CVSS6AI score0.0235EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2022/03/23 9:27 p.m.37 views

CVE-2020-20093

The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

6.2AI score0.0235EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/03/23 12:00 a.m.12 views

Meta Facebook Messenger 安全漏洞

Meta Facebook Messenger is an instant messaging software/application from Meta, Inc. that provides text and voice services. A security vulnerability exists in Meta Facebook Messenger that stems from an inability to properly present URI messages to the user, which could lead to URI spoofing via...

6.5CVSS6.4AI score0.0235EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2022/03/23 12:00 a.m.14 views

Meta Facebook Messenger 安全漏洞

Instagram Photo Wall is a social app that runs on mobile and shares the pictures you snap with each other in a fast, wonderful and fun way.Facebook Instagram has an input validation error vulnerability that stems from the failure to properly present URI messages to users, which can be exploited b...

6.5CVSS5.6AI score0.01398EPSS
SaveExploits2References5
Rows per page
Query Builder