CVE-2019-1010104

TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...

CVE-2019-1010104

The CVE-2019-1010104 entry concerns the TechyTalk Quick Chat WordPress plugin. A SQL Injection vulnerability exists in the plugin’s Quick-chat.php, specifically where the like_escape function is used (line 399), making the database susceptible to crafted Ajax requests. Multiple connected records ...

Shopify: ██████ DOM XSS via Shopify.API.remoteRedirect

Hi, team. I found a dom xss on the apple-business-chat app that seems to be referring to a vulnerable js file. For users who have installed this app, just let him use the theme code I provided to complete xss. Modify the theme code to the following payload function attack let...

The vulnerability of the HTTP API component of the Cisco Enterprise Chat and Email messaging service allows a perpetrator to disclose protected information.

The vulnerability of the HTTP API component of the Cisco Enterprise Chat and Email messaging service is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information by sending a specially...

Mail.ru: web.icq.com XSS in chat message via contact info

web.icq.com XSS in chat message via contact info...

Mail.ru: Unsafe downloaded file execution

ICQ inteface did not informed user on potentially dangerous file types then opening file from the chat window...

WordPress Live Chat Unlimited premium plugin <= 2.8.3 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by m0ze in WordPress Live Chat Unlimited premium plugin versions = 2.8.3. Solution Update the WordPress Live Chat Unlimited premium plugin to the latest available version at least 2.8.4...

Author Chat < 2.0.0 - SQL Injection

The Author Chat WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Live Chat Unlimited 2.8.3 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Live Chat Unlimited v2.8.3 Stored XSS Injection Google Dork: inurl:"wp-content/plugins/screets-lcx" Date: 2019/06/25 Exploit Author: m0ze Vendor Homepage: https://screets.com/ Software Link:...

WordPress Plugin Live Chat Unlimited Cross-Site Scripting Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A cross-site scripting vulnerability exists in the WordPress plugin Live Chat Unlimited,...

Live Chat Unlimited <= 2.8.3 - Stored Cross-Site Scripting (XSS)

Weak security measures like bad input field data filtering has been discovered in the 'Live Chat Unlimited'. PoC Go to the demo website https://screets.com/try/lcx/night-bird/ and open chat window by clicking on «Open/close» link, then click on «Online mode» to go online. Use your payload inside...

LiveZilla Server Cross-Site Scripting Vulnerability (CNVD-2019-21247)

LiveZilla is a free online customer service system, based on PHP architecture, can run on Linux hosts or windows hosts, mainly divided into the client, server and server side LiveZilla Server. LiveZilla Server 8.0.1.1 before the version of the chat.php create work order operation exists cross-sit...

CVE-2019-12963

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...

WordPress Plugin Live Chat Unlimited 2.8.3 - Cross-Site Scripting

WordPress Plugin Live Chat Unlimited 2.8.3 - Cross-Site Scripting Exploit Title: Live Chat Unlimited v2.8.3 Stored XSS Injection Google Dork: inurl:"wp-content/plugins/screets-lcx" Date: 2019/06/25 Exploit Author: m0ze Vendor Homepage: https://screets.com/ Software Link:...

WordPress Live Chat Unlimited 2.8.3 Cross Site Scripting

Exploit Title: Live Chat Unlimited v2.8.3 Stored XSS Injection Google Dork: inurl:"wp-content/plugins/screets-lcx" Date: 2019/06/25 Exploit Author: m0ze Vendor Homepage: https://screets.com/ Software Link: https://codecanyon.net/item/wordpress-live-chat-plugin/3952877 Version: 2.8.3 Tested on:...

WordPress Plugin Live Chat Unlimited 2.8.3 - Cross-Site Scripting

Exploit Title: Live Chat Unlimited v2.8.3 Stored XSS Injection Google Dork: inurl:"wp-content/plugins/screets-lcx" Date: 2019/06/25 Exploit Author: m0ze Vendor Homepage: https://screets.com/ Software Link: https://codecanyon.net/item/wordpress-live-chat-plugin/3952877 Version: 2.8.3 Tested on:...

iLive <= 1.0.4 - Stored Cross-Site Scripting (XSS)

Info: Weak security measures like bad textarea data filtering has been discovered in the 'iLive - Intelligent WordPress Live Chat Support Plugin'. Current version of this premium WordPress plugin is 1.0.4. Demo Website: https://codecanyon.net/item/ilive-wordpress-live-chat-support-plugin/20496563...

Cisco Enterprise Chat and Email Attachment Download Vulnerability

Cisco Enterprise Chat and Email CEC is a suite of enterprise chat and email solutions from Cisco. The product focuses on providing e-mail, chat, and Web callback capabilities, among other things, for other Cisco solutions. An attachment download vulnerability exists in the HTTP API for Cisco...

Cisco Enterprise Chat and Email Attachment Download Vulnerability

A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could explo...

The vulnerability in the web interface of Cisco Enterprise Chat and Email Center allows a perpetrator to execute arbitrary code or disclose protected information.

The vulnerability in the web interface of Cisco Enterprise Chat and Email Center exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or disclose sensitive information through a specially create...