MCabber records
2 published records for vendor mcabber.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2016-9928No exploit | MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as amcabber · mcabber · CWE-269 | High7.4 | — | 4.5% | Feb 6, 2020 |
23Monitor | CVE-2017-5604No exploit | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includmcabber · mcabber · CWE-20 | Medium5.9 | — | 1.3% | Feb 9, 2017 |
- CVE-2016-992830Monitor
MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as a
HighCVSS 7.4No exploitEPSS 4%mcabber · mcabberFeb 6, 2020
- CVE-2017-560423Monitor
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ
MediumCVSS 5.9No exploitEPSS 1%mcabber · mcabberFeb 9, 2017