SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. Public exploit code available.
Information Disclosure
Microsoft
Simplex Chat
Simplexmq
NVD
GitHub
CVSS 3.1
5.3
EPSS
0.6%
A vulnerability was found in gnuboard5. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.
PHP
XSS
Gnuboard
NVD
GitHub
VulDB
CVSS 3.1
5.4
EPSS
0.4%
CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
XXE
Cbrn Analysis
NVD
CVSS 3.1
4.7
EPSS
0.4%