EUVD-2015-3497

Malware in sbrugna...

CVE-2015-3454

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

Cross site scripting

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

CVE-2015-3454

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

CVE-2015-3454

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

CVE-2015-3454

TelescopeJS prior to version 0.15 leaks user bcrypt password hashes in websocket messages, which an attacker could obtain through a cross-site scripting attack. This is documented in CVE-2015-3454 (NVD). The available sources corroborate that the vulnerability involves leaking password hash data ...

CVE-2015-3454: Exposure of Sensitive Information to an Unauthorized Actor

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack...

PT-2017-6677

Name of the Vulnerable Software and Affected Versions TelescopeJS versions prior to 0.15 Description The issue allows remote attackers to obtain user bcrypt password hashes via a cross-site scripting attack, as these hashes are leaked in websocket messages. Recommendations For versions prior to...

TelescopeJS Password Hash Information Disclosure Vulnerability

TelescopeJS is a suite of open source social news applications. An information disclosure vulnerability exists in TelescopeJS, which allows remote attackers to exploit the vulnerability to obtain sensitive information about password hashes...