CVE-2016-1157

Cross-site scripting XSS vulnerability in logchat.cgi in Script Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1157

Cross-site scripting XSS vulnerability in logchat.cgi in Script Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1157

CVE-2016-1157 is a stored XSS vulnerability in Script* Log-Chat's log_chat.cgi for versions prior to 2.0. A remote attacker can inject arbitrary web script/HTML, potentially executing in the victim’s browser. Affected product: Script* Log-Chat (Log-Chat) prior to version 2.0. Root cause: cross-si...

CVE-2016-1157

Cross-site scripting XSS vulnerability in logchat.cgi in Script Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Log-Chat vulnerable to cross-site scripting

Overview Log-Chat provided by Script contains a stored cross-site scripting vulnerability CWE-79. Masamu Asato of National Institute of Technology, Okinawa College reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

JVN#93535632: Log-Chat vulnerable to cross-site scripting

Log-Chat provided by Script contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products Affected Log-Ch...

Mail.ru: Stored XSS на street-combats.mail.ru

Stored XSS via chat message in street-combats.mail.ru project. street-combats.mail.ru is out of scope of Mail.Ru bug bounty program...

Zendesk: Chat History CSV Export Excel Injection Vulnerability

I have found a vulnerability in the Chat History export function. If an attacker submits a special name containing a system command when chatting with an agent and that agent later exports the history of that chat to CSV, the resulting CSV may execute commands when opened. I have tested this usin...

Disabled PadCrypt Ransomware Includes Live Chat, Uninstaller

Several flavors of ransomware, most notably Cryptowall, have come packaged with support features. But a new piece of crypto-ransomware called PadCrypt has upped the game with a live chat feature that victims can use to interact with the attackers about ransom payments and other information...

ATutor 2.2 - Multiple Cross-Site Scripting Vulnerabilities

ATutor 2.2 - Multiple Cross-Site Scripting Vulnerabilities Security Advisory - Curesec Research Team 1. Introduction Affected Product: Atutor 2.2 Fixed in: partly in ATutor 2.2.1-RC1, complete in 2.2.1 Fixed Version Link: http://www.atutor.ca/atutor/download.php Vendor Website:...

Cisco Jabbar chat client vulnerability to man in the middle attacks-vulnerability warning-the black bar safety net

Cisco released an official announcement that its chat clients Jabbar in the presence of security vulnerabilities, vulnerable to a middleman attack. The vulnerability exists on the Windows platform-Jabbar, an unauthorized remote attacker can exploit the vulnerability to implement STARTTLS downgrad...

CVE-2015-7782

Cross-site scripting XSS vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7782

CVE-2015-7782 concerns Frame high-speed chat from Let’s PHP!, with a cross-site scripting (XSS) vulnerability (CWE-79) exploitable via unspecified vectors in versions prior to 2015-09-22. Public details show the issue and that the recommended remediation is to update to the latest version accordi...

CVE-2015-7782

Cross-site scripting XSS vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

KiTTY Portable 0.65.0.2p (Windows XP/7/10) - Chat Remote Buffer Overflow (SEH)

Exploit Title: KiTTY Portable Remote Code Execution Win7 - Remote Code Execution...

KiTTY Portable 0.65.0.2p - Chat Remote Buffer Overflow (SEH Windows XP/7/10)

Exploit for windows platform in category remote exploits Exploit Title: KiTTY Portable = 0.65.0.2p Chat Remote Buffer Overflow SEH WinXP/Win7/Win10 Date: 28/12/2015 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: http://networkfilter.blogspot.com GitHub:...

Drupal Chat Room Module Information Disclosure Vulnerability

Drupal is a free and open source content management system developed in PHP. Chat Room is one of the modules used to set up the chat room feature on the Drupal website. Drupal Chat Room fails to properly check permissions when setting up websocket sockets for chat messages, which can be exploited...

CVE-2015-8601

The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors...

Design/Logic Flaw

The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors...