2621 matches found
Code injection
Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.0 and before 2.3.0 there was a set of vulnerabilities causing inadequate encryption strength. Part of the secret identity key was disclosed by the fingerprint used for connectio...
CVE-2021-21387 Partial secret key disclosure, improper safety number calculation, & inadequate encryption strength
Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.0 and before 2.3.0 there was a set of vulnerabilities causing inadequate encryption strength. Part of the secret identity key was disclosed by the fingerprint used for connectio...
CVE-2021-21387
The CVE-2021-21387 entry concerns the Wrongthink peer-to-peer, end-to-end encrypted messenger (using PeerJS and Axolotl ratchet). The documented issues include partial disclosure of the secret identity key via the fingerprint used for connections, and an improperly calculated safety number (deriv...
CVE-2019-18233
creationtimestamp| type| source ---|---|--- 2021-03-17 21:31:11+00:00| seen| https://t.me/cibsecurity/25056...
Softros LAN Messenger 9.6.4 Unquoted Service Path
Exploit Title: Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path Discovery by: Victor Mondragón Discovery Date: 23-02-2021 Vendor Homepage: https://www.softros.com/ Software Links : https://download.softros.com/SoftrosLANMessengerSetup.exe Tested Version: 9.6.4 Vulnerabili...
Softros LAN Messenger 9.6.4 - (SoftrosSpellChecker) Unquoted Service Path Vulnerability
Exploit Title: Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path Discovery by: Victor Mondragón Vendor Homepage: https://www.softros.com/ Software Links : https://download.softros.com/SoftrosLANMessengerSetup.exe Tested Version: 9.6.4 Vulnerability Type: Unquoted Service...
Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path
Exploit Title: Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path Discovery by: Victor Mondragón Discovery Date: 23-02-2021 Vendor Homepage: https://www.softros.com/ Software Links : https://download.softros.com/SoftrosLANMessengerSetup.exe Tested Version: 9.6.4 Vulnerabili...
Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials
A credential stealer infamous for targeting Windows systems has resurfaced in a new phishing campaign that aims to steal credentials from Microsoft Outlook, Google Chrome, and instant messenger apps. Primarily directed against users in Turkey, Latvia, and Italy starting mid-January, the attacks...
Researchers Uncover Android Spying Campaign Targeting Pakistan Officials
Two new Android surveillanceware families have been found to target military, nuclear, and election entities in Pakistan and Kashmir as part of a pro-India, state-sponsored hacking campaign. Dubbed Hornbill and Sunbird, the malware impersonates legitimate or seemingly innocuous services to cover...
CVE-2020-35547
A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access view and modify to user data...
Code injection
A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access view and modify to user data...
CVE-2020-35547
A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access view and modify to user data...
CVE-2020-35547
Affected software: Mitel MiCollab (NuPoint Messenger) before 9.2 FP1. Root cause: library index page in NuPoint Messenger. Impact: unauthenticated attacker could view and modify user data. Remediation: upgrade to Mitel MiCollab 9.2 FP1 (or apply vendor security advisories). Exploitation status:**...
Mitel Networks MiCollab 授权问题漏洞
Mitel Networks MiCollab is a mobile application from Mitel Networks Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A security vulnerability previously existed in Mitel Networks MiCollab version 9.2, which stemmed from a library index page in...
CVE-2020-35547: Undefined Security Weakness
A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an unauthenticated attacker to gain access view and modify to user data...
Google Research Pinpoints Security Soft Spot in Multiple Chat Platforms
Google Project Zero researcher Natalie Silvanovich outlined what she believes is a common theme when it comes to serious vulnerabilities impacting leading chat platforms. The research, published Tuesday, identifies a common denominator within chat platforms, called “calling state machine”, which...
Google Details Patched Bugs in Signal, FB Messenger, JioChat Apps
In January 2019, a critical flaw was reported in Apple's FaceTime group chats feature that made it possible for users to initiate a FaceTime video call and eavesdrop on targets by adding their own number as a third person in a group chat even before the person on the other end accepted the incomi...
Mitel MiCollab Information Disclosure Vulnerability
Mitel MiCollab is an enterprise collaboration software and tools platform solution. An information disclosure vulnerability exists in Mitel MiCollab versions prior to 9.2 for NuPoint Messenger. The vulnerability stems from insufficient access control. An attacker could exploit the vulnerability t...
Mitel MiCollab Cross-Site Scripting Vulnerability (CNVD-2021-07243)
Mitel MiCollab is an enterprise collaboration software and tools platform solution. A cross-site scripting vulnerability exists in NuPoint Messenger Portal for Mitel MiCollab versions prior to 9.2. The vulnerability stems from insufficient input validation. An attacker could exploit the...
CVE-2020-25609
The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to view and modify user data...