https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:40:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-00924 cnvd-2016-00924 https://cve.radiocsirt.org/vuln/cnvd-2016-00924 https://cve.radiocsirt.org/vuln/euvd-2026-81529 EUVD-2026-81529 https://cve.radiocsirt.org/vuln/euvd-2026-81529 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0756 <p>The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.</p> <p>The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0756 https://cve.radiocsirt.org/vuln/ghsa-xf9v-h9f2-2phh <p>The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.</p> <p>The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.</p> https://cve.radiocsirt.org/vuln/ghsa-xf9v-h9f2-2phh https://cve.radiocsirt.org/vuln/gsd-2016-0756 gsd-2016-0756 https://cve.radiocsirt.org/vuln/gsd-2016-0756 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10489-1 <p>prosody-0.9.11-1.1 on GA media</p> <p>prosody-0.9.11-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10489-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0756 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: prosody</p> <p>The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: prosody</p> <p>The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0756