2394 matches found
CVE-2022-24004
CVE-2022-24004 pertains to a Stored XSS in REDCap 12.0.11 affecting Messenger/messenger_ajax.php. The vulnerability allows any authenticated user editing an existing conversation to inject arbitrary code into the messenger title (new_title) field, with the payload then executing in the browsers o...
REDCap 跨站脚本漏洞
REDCap is a data collection and management web application. A security vulnerability exists in REDCap version 12.0.11, which stems from a stored cross-site scripting XSS issue in ProjectGeneral/editprojectsettings.php. An authenticated, remote attacker can exploit this vulnerability to inject...
REDCap 跨站脚本漏洞
REDCap is a data collection and management web application. A security vulnerability exists in REDCap version 12.0.11, which stems from a stored cross-site scripting XSS issue in Messenger/messengerajax.php. An authenticated, remote attacker can exploit this vulnerability to inject arbitrary...
Facebook users targeted in massive phishing campaign
Facebook is once again the launchpad for a large-scale phishing campaign, according to researchers at PIXM. The campaign, which first shows signs of life back in September 2021, has generated millions of page views and ad referral revenue "estimated to be millions of USD at this scale of...
Telegram Shared Personal User Data With German Authorities
By Deeba Ahmed The popular messenger app has transferred the data of its users to the German Federal Criminal Police Office.… This is a post from HackRead.com Read the original post: Telegram Shared Personal User Data With German Authorities...
CVE-2022-28218
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys found in a Roundcube configuration file that are used to protect Webmail user passwords and two-factor authentication 2FA...
CVE-2022-28218
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys found in a Roundcube configuration file that are used to protect Webmail user passwords and two-factor authentication 2FA...
CVE-2022-28218
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys found in a Roundcube configuration file that are used to protect Webmail user passwords and two-factor authentication 2FA...
CVE-2022-28218
An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys found in a Roundcube configuration file that are used to protect Webmail user passwords and two-factor authentication 2FA...
CVE-2022-28218
CipherMail Webmail Messenger versions 1.1.1–4.1.4 are affected by a local-attack vulnerability where secret keys stored in the Roundcube configuration file, used to protect Webmail user passwords and 2FA, can be accessed by an attacker with local access. This exposes confidentiality of credential...
CipherMail Webmail Messenger 安全漏洞
Ciphermail CipherMail Webmail Messenger is a Webmail add-on for the CipherMail cryptographic gateway from the Dutch company Ciphermail. A security vulnerability in CipherMail Webmail Messenger 1.1.1 through 4.1.4 allows a local attacker to access the key found in the Roundcube configuration file...
Critical Bug in Everscale Wallet Could've Let Attackers Steal Cryptocurrencies
A security vulnerability has been disclosed in the web version of the Ever Surf wallet that, if successfully weaponized, could allow an attacker to gain full control over a victim's wallet. "By exploiting the vulnerability, it's possible to decrypt the private keys and seed phrases that are store...
CVE-2021-43430
An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...
CVE-2021-43430
An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...
CVE-2021-43430
An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...
Improper access control
An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...
CVE-2021-43430
The CVE-2021-43430 vulnerability affects BigAntSoft BigAnt office messenger 5.6 via the im_webserver, described as an access-control flaw that could let a malicious user upload PHP Trojan files. The connected sources confirm the product and the attack vector (networks via im_webserver) and state ...
SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps
As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot. "SharkBot steals credentials and banking information," Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with T...
BigAntSoft BigAnt office messenger 代码问题漏洞
BigAntSoft BigAnt office messenger is a server/client instant messaging program for enterprise environments from BigAntSoft Australia. A security vulnerability exists in BigAntSoft BigAnt office messenger 5.6 that could allow a malicious user to upload a PHP Trojan horse file...
