Lucene search
+L

8050 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 8:35 p.m.9 views

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet...

5CVSS6.7AI score0.01104EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:35 p.m.11 views

CVE-2002-2173

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...

7.5CVSS8.3AI score0.03135EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:52 p.m.12 views

CVE-2009-3822

PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat comajaxchat component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter to tests/ajcuser.php...

7.5CVSS8AI score0.02585EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:03 p.m.12 views

CVE-2025-39411

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in IndiePlugins WhatsApp Click to Chat Plugin for WordPress wpt-whatsapp.This issue affects WhatsApp Click to Chat Plugin for WordPress: from n/a through = 2.2.12...

7.5CVSS7.2AI score0.00548EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 6:22 p.m.11 views

CVE-1999-0255

Buffer overflow in ircd allows arbitrary command execution...

10CVSS7.5AI score0.03EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2025/05/20 12:00 a.m.22 views

Your First Spring AI 1.0 Application

Your First Spring AI 1.0 Application by Dr. Mark Pollack, Christian Tsolov, and Josh Long Hi, Spring fans! Spring AI is live on the Spring Initializr and everywhere fine bytes might be had. Ask your doctor if AI is right for you! It's an amazing time to be a Java and Spring developer. There's nev...

6.6AI score
SaveExploits0
Cvelist
Cvelist
added 2025/05/19 6:58 p.m.28 views

CVE-2025-39411 WordPress WhatsApp Click to Chat Plugin for WordPress plugin <= 2.2.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in IndiePlugins WhatsApp Click to Chat Plugin for WordPress wpt-whatsapp.This issue affects WhatsApp Click to Chat Plugin for WordPress: from n/a through = 2.2.12...

7.5CVSS0.00548EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/05/19 2:38 p.m.2 views

Astra Linux - уязвимость в thunderbird

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird 128.2...

6.5CVSS6.9AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/19 12:00 a.m.9 views

WordPress plugin WhatsApp Click to Chat Plugin for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00548EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:00 a.m.11 views

PT-2025-22079 · WordPress · Indie Plugins Whatsapp Click To Chat Plugin

Name of the Vulnerable Software and Affected Versions: Indie Plugins WhatsApp Click to Chat Plugin for WordPress versions n/a through 2.2.12 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'...

7.5CVSS8.1AI score0.00548EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/17 12:15 p.m.8 views

CVE-2024-13613

The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.3 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which c...

7.5CVSS5.8AI score0.00469EPSS
SaveExploits0References4
CVE
CVE
added 2025/05/17 11:17 a.m.54 views

CVE-2024-13613

CVE-2024-13613 concerns the Wise Chat WordPress plugin. The vulnerability allows unauthenticated attackers to access sensitive data stored under the uploads directory (wp-content/uploads), exposing file attachments included in chat messages. Affected versions go up to and including 3.3.3, with pa...

7.5CVSS7.3AI score0.00469EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/17 11:17 a.m.11 views

CVE-2024-13613 Wise Chat <= 3.3.3 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.3 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which c...

7.5CVSS7.4AI score0.00469EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/05/17 11:17 a.m.39 views

CVE-2024-13613 Wise Chat <= 3.3.3 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.3 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which c...

7.5CVSS0.00469EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/17 12:00 a.m.11 views

WordPress plugin Wise Chat 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

7.5CVSS7.5AI score0.00469EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/05/17 12:00 a.m.11 views

PT-2025-21786 · WordPress · Wise Chat

Name of the Vulnerable Software and Affected Versions: Wise Chat plugin for WordPress versions prior to 3.3.4 Description: The issue allows unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory, which can contain file attachments included in ch...

7.5CVSS7.9AI score0.00469EPSS
SaveExploits0References10
Patchstack
Patchstack
added 2025/05/16 10:14 p.m.16 views

WordPress Wise Chat plugin <= 3.3.3 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin Wise Chat versions = 3.3.2...

7.5CVSS8.2AI score0.00469EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/05/16 12:15 a.m.30 views

CVE-2025-47930

Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" access control mechanism can be circumvented by creating a private or web-public channel, and then changing the channel privacy to public. A similar technique...

5.3CVSS0.00339EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/15 12:58 p.m.7 views

Malicious code in old-react-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0ae29d9cb582d5c0be810adbab5c88a3409a65d0d94034301910bb1c735e2c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2025/05/15 12:58 p.m.6 views

MAL-2025-3847 Malicious code in old-react-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0ae29d9cb582d5c0be810adbab5c88a3409a65d0d94034301910bb1c735e2c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Rows per page
Query Builder