Ispirithalaya Hospital Management System 0.1.2 Database Configuration Disclosure

Exploit Title : Ispirithalaya Hospital Management System 0.1.2 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : freeehospital.com Software Download Link :...

GitLab: Inadequate cache control in gitter allows to view private chat room

Hi Gitlab, Summary: I have found a inadequate cache control vulnerability in Gitter. Description: You can use the backspace button to get the full access to the account. There is no cache control and the browser saves sensitive information of a private chat room. This report is influenced by the...

Go Update iOS Right Now To Fix That Very Bad FaceTime Bug

Apple has just released iOS 12.1.4, which fixes a group chat FaceTime bug that let callers eavesdrop on targets...

The vulnerability of the “chat feed” component of the automation software for interacting with Cisco SocialMiner customers allows a hacker to inject arbitrary code into the uploaded web page.

The vulnerability of the “chat feed” component of the Cisco SocialMiner automation software exists because measures to protect the structure of the web page have not been taken. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page that is loaded by...

How to Delete Accidentally Sent Messages, Photos on Facebook Messenger

Ever sent a message on Facebook Messenger then immediately regretted it, or an embarrassing text to your boss in the heat of the moment at late night, or maybe accidentally sent messages or photos to a wrong group chat? Of course, you have. We have all been through drunk texts and embarrassing...

WordPress WP Live Chat 8.0.18 Cross Site Scripting

Vulnerability: XSS Affected Software: WP Live Chat Support Affected Version: 8.0.18 Patched Version: CVE: not requested Risk: Medium Vendor Contacted: 10/31/2018 Vendor Fix: 11/01/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

CVE-2019-7316

An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability...

WordPress Wise Chat Plugin Has Unspecified Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Wise Chat plugin is used in one of the live chat plugin. An unspecified vulnerability exists in the WordPress Wis...

The Pitfalls of Facebook Merging Messenger, Instagram, and WhatsApp Chats

Facebook's effort to combine its major chat platforms could create minefields for users who rely on end-to-end encryption...

Wise Chat <= 2.6.3 - Reverse Tabnabbing

The Wise Chat WordPress plugin was affected by a Reverse Tabnabbing security vulnerability...

Cisco SocialMiner Cross-Site Scripting Vulnerability (CNVD-2019-02746)

Cisco SocialMiner is the United States Cisco Cisco a social media call center solution. The solution supports social media monitoring and analytics. A cross-site scripting vulnerability exists in the chat feed functionality of Cisco SocialMiner, which stems from the program's failure to adequatel...

Wordpress Plugin Wisechat 2.6.3 - Reverse Tabnabbing

Wordpress Plugin Wisechat 2.6.3 - Reverse Tabnabbing Exploit Title: Wordpress Plugin Wisechat if window.opener window.opener.parent.location.replace'http://mtk911.cf/'; if window.parent != window window.parent.location.replace'http://mtk911.cf/'; Open Redirect TEST when you click on that user. Th...

WordPress Wise Chat plugin <= 2.6.3 - Reverse Tabnabbing vulnerability

Reverse Tabnabbing vulnerability found by MTK in WordPress Wise Chat plugin versions = 2.6.3. Solution Update the WordPress Wise Chat plugin to the latest available version at least 2.7...

WordPress Wisechat 2.6.3 Forced Redirect / Phishing

Exploit Title: Wordpress Plugin Wisechat if window.opener window.opener.parent.location.replace'http://mtk911.cf/'; if window.parent != window window.parent.location.replace'http://mtk911.cf/'; Open Redirect TEST when you click on that user. This opens in a new tab, and the parent tab is silently...

CVE-2019-6780

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

CVE-2019-6780

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

Code injection

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

CVE-2019-6780

The CVE-2019-6780 entry concerns the WordPress Wise Chat plugin prior to 2.7. The root cause is in WiseChatLinksPostFilter.php, where external links are mishandled due to omission of noopener and noreferrer attributes when rendering links. Public references in connected documents corroborate this...

CVE-2019-6780

The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer...

Cross site scripting

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient sanitization of user-supplied...