Telekom Security

Nov 29, 2024 Security Advisory

Tuta Mail Vulnerability - Client Information Leak

An client information leak vulnerability (CVE-2024-23330) has been identified in Tuta Mail. This vulnerability could leak client information by loading external resources in the mail even if disabled.

Nov 29, 2024 Security Advisory

Tuta Mail Vulnerability - DoS

A denial of service vulnerability (CVE-2024-23655) has been identified in Tuta Mail. This vulnerability could prevent users from accessing and reading received mails when an attacker sends a manipulated mail.

Nov 27, 2024 Security Advisory

Apple ARKit Vulnerability - Heap Overflow

A heap corruption vulnerability (CVE-2024-44126) has been identified in several Apple products that use the ARKit component. This vulnerability could compromise the security of devices when processing a specially crafted file.

Nov 04, 2024 Security Advisory

Remote buffer overflow vulnerability in SharkSSL TLS Client Key Exchange handshake processing

A new remote buffer overflow vulnerability (CVE-2024-48075) was discovered in the latest version of the SharkSSL library from 09.09.2024 (https://github.com/RealTimeLogic/SharkSSL) by security evaluators of Deutsche Telekom Security GmbH...

Sep 06, 2024 Security Advisory

Collabora Office for Android - JavaScript Injection via Links

A JavaScript Injection vulnerability (CVE-2024-45045) has been identified in Collabora Office for Android, allowing an attacker to execute arbitrary JavaScript within the context of the Android App when a victim opens a specially crafted...

Aug 28, 2024 Security Advisory

Moodle - Reflected XSS Vulnerability via H5P error message

A reflected cross-site scripting (XSS) vulnerability (CVE-2024-43439) has been identified in Moodle, allowing an attacker to execute arbitrary JavaScript within the context of a Moodle website when a victim visits a specially crafted link.

Jul 03, 2024 Security Advisory

Peripheral Sight - Red Teaming with printer CVE-2024-5143

In a red team engagement, anything can be a target, and depending on what has already been looted (or not), everything will be a target - even as a form of desperation.In this stage of an engagement, a red team member may have to broaden...

Apr 29, 2024 Security Advisory

Airmail App - JavaScript Injection Vulnerability Exposes Sensitive Data

A vulnerability has been identified in the popular iOS/macOS email apps “Airmail - Your Mail With You” and “Airmail for Business” that poses a significant risk. The vulnerability, classified as a JavaScript injection combined with an ins...

Telekom Security Updates