https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T03:22:04.403135+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-00924 cnvd-2016-00924 2026-10-06T03:22:04.525579+00:00 cnvd-2016-00924 https://cve.radiocsirt.org/vuln/euvd-2026-81529 EUVD-2026-81529 2026-10-06T03:22:04.525621+00:00 EUVD-2026-81529 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0756 fkie_cve-2016-0756 2026-10-06T03:22:04.525636+00:00

The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.

 https://cve.radiocsirt.org/vuln/ghsa-xf9v-h9f2-2phh GHSA-xf9v-h9f2-2phh 2026-10-06T03:22:04.525666+00:00

The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.

 https://cve.radiocsirt.org/vuln/gsd-2016-0756 gsd-2016-0756 2026-10-06T03:22:04.525683+00:00 gsd-2016-0756 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10489-1 openSUSE-SU-2024:10489-1 — prosody-0.9.11-1.1 on GA media 2026-10-06T03:22:04.525694+00:00

prosody-0.9.11-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0756 UBUNTU-CVE-2016-0756 2026-10-06T03:22:04.525714+00:00

Affected: Ubuntu:16.04:LTS: prosody

The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.