EUVD-2011-5181

Malware in sbrugna...

EUVD-2017-9759

Malware in sbrugna...

EUVD-2023-57758

Malicious code in bioql PyPI...

CVE-2023-5570

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting. This issue affects Home Manager Gateway: before v.1.27.12...

PT-2023-1715 · Inscada · Inscada

Name of the Vulnerable Software and Affected Versions: inSCADA versions before 20230115-1 Description: The issue is related to improper protection for outbound error messages and alert signals in inSCADA, allowing account footprinting. This could potentially impact the confidentiality, integrity,...

CVE-2011-5282

mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled...

CVE-2011-5282

CVE-2011-5282 affects mIRC prior to version 7.22, where outbound messages are chopped in a way that leaks information. The root cause is mishandling of message chopping, leading to a partial confidentiality impact. Exploitation details are not provided in the connected documents, but Red Hat and ...

CVE-2014-3464

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform EAP 6.2.0 and 6.3.0, does not properly enforce the method level restrictions for outbound messages, which allows remote authenticated users to access otherwise restricted JAX-WS handlers...

Input validation

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform EAP 6.2.0 and 6.3.0, does not properly enforce the method level restrictions for outbound messages, which allows remote authenticated users to access otherwise restricted JAX-WS handlers...

WS: Incomplete fix for CVE-2013-2133

It was found that the fix for CVE-2013-2133 was incomplete: the JAX-WS handlers were being executed for outbound messages even when authorization had failed. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke...

WS: Incomplete fix for CVE-2013-2133

It was found that the fix for CVE-2013-2133 was incomplete: the JAX-WS handlers were being executed for outbound messages even when authorization had failed. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke...