Zendesk: a stored xss in web widget chat

The researcher found a stored XSS vulnerability where an end-user was able to execute arbitrary Javascript against the Zendesk agent via the chat integration. The researcher participated in the Zendesk 2016 holiday promotion and was awarded the Zendesk promotional bounty...

Facebook chat history stealing vulnerability, the impact of the billion Messenger users-vulnerability warning-the black bar safety net

In this article, we describe in detail A in Facebook on find Server security vulnerabilities, this vulnerability might affect millions of CORScross-origin resource sharingin the Origin header to allow“NULL”value of the site, the vulnerability will threat the privacy of the user, the malicious...

[SECURITY] Fedora 24 Update: mcabber-1.0.4-1.fc24

mcabber is a console Jabber instant messaging/chat client with SSL support, MUC Multi-User Chat support, history logging, commands completion, and extern al action triggers...

AVChat Video Chat Integration Kit, File permissions

AVChat Video Chat Integration Kit, File permissions...

YouNow: Live Stream Video Chat - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application YouNow: Live Stream Video Chat published at the 'play' market has multiple vulnerabilities...

Yahoo Messenger - Free chat - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Messenger - Free chat published at the 'play' market has multiple vulnerabilities...

Simple keitai chat vulnerable to cross-site scripting

Overview Simple keitai chat provided by LEMON-S PHP contains reflected and stored cross-site scripting vulnerabilities CWE-79. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#05493467: Simple keitai chat vulnerable to cross-site scripting

Simple keitai chat provided by LEMON-S PHP contains reflected and stored cross-site scripting vulnerabilities CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Simple keitai chat Simple keitai chat is no longer being developed or maintained. It is...

OS X Gather Messages

This module will collect the Messages sqlite3 database files and chat logs from the victim's machine. There are four actions you may choose: DBFILE, READABLE, LATEST, and ALL. DBFILE and READABLE will retrieve all messages, and LATEST will retrieve the last X number of messages useful with 2FA...

GUYZ - Gay Chat & Gay Dating - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GUYZ - Gay Chat & Gay Dating published at the 'play' market has multiple vulnerabilities...

dev.bib.hs-hannover.de XSS vulnerability

Vulnerable URL: http://dev.bib.hs-hannover.de/chat/patron/ajaxinit.php?jsoncallback=prompt/OPENBUGBOUNTY/...

chat-tst2.coral.co.uk XSS vulnerability

Vulnerable URL: https://chat-tst2.coral.co.uk/chatweb/conf/coraltst2coral/widget?lang=%27/prompt%28%27OPENBUGBOUNTY%27%29/%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Slack Chat Detection - UDP #2

Binary data 9605.prm...

Slack Chat Detection via UDP

Binary data 9606.prm...

Slack Chat Detection - UDP #1

Binary data 9604.prm...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

Irssi 'buf.pl' Local Information Disclosure Vulnerability

Irssi is a text-based IRC client program written in C by Timo Sirainen and released under the GPL GNU General Public License. A local information disclosure vulnerability exists in Irssi, which can be exploited by a local attacker to obtain sensitive information...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

HipChat - Chat Built for Teams - BSD license, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application HipChat - Chat Built for Teams published at the 'play' market has multiple vulnerabilities...

WordPress WP Live Chat Support Plugin 6.2.03 - XSS

WP Live Chat Support Plugin 6.2.03 is prone to a Cross-site scripting XSS vulnerability. This vulnerability allows to perform a number of arbitrary actions via wp-live-chat-support/functions.php line 1233. Solution Update the plugin. This vulnerability was fixed in 6.2.04...