CVE-2023-54330

Summary: CVE-2023-54330 affects Inbit Messenger versions 4.6.0–4.9.0. The flaw is a remote stack-based buffer overflow in the messenger’s network handler that can be triggered by sending malformed network packets, allowing unauthenticated attackers to overwrite the Structured Exception Handler (S...

CVE-2023-54329

Inbit Messenger 4.6.0–4.9.0 is affected by an unauthenticated remote command execution via a stack overflow in the messenger’s protocol. The vulnerability allows attackers to send specially crafted XML packets to TCP port 10883 to trigger execution of arbitrary commands with system privileges. Th...