7971 matches found
Black Hat: LeapFrog Tablet Flaws Let Attackers Track, Message Kids
LAS VEGAS – Serious vulnerabilities have been disclosed in LeapFrog’s tablet for kids, the LeapPad Ultimate, once again throwing child data privacy into the spotlight. The LeapPad Ultimate is a rugged tablet made by LeapFrog that targets children with an array of education, game and eBook apps...
SmokeDetector Code Execution Vulnerability
SmokeDetector is a program that detects spam and posts links to chat rooms. A security vulnerability exists in SmokeDetector. An attacker could exploit the vulnerability to execute code...
Facebook Messenger Customer Chat Plugin - Critical - Access bypass - SA-CONTRIB-2019-059
The Facebook Messenger Customer Chat Plugin module enables you to add the Facebook Messenger Customer Chat Plugin to your Drupal site. The module doesn't require user permissions on the admin page...
WordPress WP Live Chat Plugin Arbitrary File Upload (CVE-2019-11185)
An Arbitrary File Upload vulnerability exists in WordPress Live Chat Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the effected system...
WordPress TechyTalk Quick Chat Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.TechyTalk Quick Chat is an online chat plugin used in it. A SQL injection vulnerability exists in the 'likeescape' function of the...
CVE-2019-1010104
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...
CVE-2019-1010104
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...
CVE-2019-1010104
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...
CVE-2019-1010104
The CVE-2019-1010104 entry concerns the TechyTalk Quick Chat WordPress plugin. A SQL Injection vulnerability exists in the plugin’s Quick-chat.php, specifically where the like_escape function is used (line 399), making the database susceptible to crafted Ajax requests. Multiple connected records ...
Shopify: ██████ DOM XSS via Shopify.API.remoteRedirect
Hi, team. I found a dom xss on the apple-business-chat app that seems to be referring to a vulnerable js file. For users who have installed this app, just let him use the theme code I provided to complete xss. Modify the theme code to the following payload function attack let...
The vulnerability of the HTTP API component of the Cisco Enterprise Chat and Email messaging service allows a perpetrator to disclose protected information.
The vulnerability of the HTTP API component of the Cisco Enterprise Chat and Email messaging service is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information by sending a specially...
Mail.ru: web.icq.com XSS in chat message via contact info
web.icq.com XSS in chat message via contact info...
Mail.ru: Unsafe downloaded file execution
ICQ inteface did not informed user on potentially dangerous file types then opening file from the chat window...
WordPress Live Chat Unlimited premium plugin <= 2.8.3 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by m0ze in WordPress Live Chat Unlimited premium plugin versions = 2.8.3. Solution Update the WordPress Live Chat Unlimited premium plugin to the latest available version at least 2.8.4...
Author Chat < 2.0.0 - SQL Injection
The Author Chat WordPress plugin was affected by a SQL Injection security vulnerability...
WordPress Live Chat Unlimited 2.8.3 Plugin - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Live Chat Unlimited v2.8.3 Stored XSS Injection Google Dork: inurl:"wp-content/plugins/screets-lcx" Date: 2019/06/25 Exploit Author: m0ze Vendor Homepage: https://screets.com/ Software Link:...
WordPress Plugin Live Chat Unlimited Cross-Site Scripting Vulnerability
WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A cross-site scripting vulnerability exists in the WordPress plugin Live Chat Unlimited,...
Live Chat Unlimited <= 2.8.3 - Stored Cross-Site Scripting (XSS)
Weak security measures like bad input field data filtering has been discovered in the 'Live Chat Unlimited'. PoC Go to the demo website https://screets.com/try/lcx/night-bird/ and open chat window by clicking on «Open/close» link, then click on «Online mode» to go online. Use your payload inside...
LiveZilla Server Cross-Site Scripting Vulnerability (CNVD-2019-21247)
LiveZilla is a free online customer service system, based on PHP architecture, can run on Linux hosts or windows hosts, mainly divided into the client, server and server side LiveZilla Server. LiveZilla Server 8.0.1.1 before the version of the chat.php create work order operation exists cross-sit...