Lucene search
+L

7933 matches found

BDU FSTEC
BDU FSTEC
added 2015/08/07 12:00 a.m.11 views

The vulnerability of the Moodle learning management system allows a hacker to alter the settings of the chat ban.

The vulnerability of the message/externallib.php component of the Moodle learning management system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to alter the settings for chat messages by using...

4CVSS5.4AI score0.01712EPSS
SaveExploits0References4Affected Software1
The Hacker News
The Hacker News
added 2015/07/11 3:09 a.m.20 views

WhatsApp Could Offer 'Like' and 'Mark as Unread' Features Soon

The popular instant messaging app WhatsApp might adopt some features from its parent company, Facebook. The messaging giant is testing some new features that might be coming to the app soon. The features include a 'Like' button similar to that of Facebook and a 'Mark as Unread' feature for chat...

6.5AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2015/07/06 12:00 a.m.11 views

WP Live Chat Support < 4.4.0 - Unauthenticated Blind SQL Injection

The 3CX Live Chat WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability...

1.9AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2015/07/06 12:00 a.m.14 views

WordPress Live Chat Support Plugin <= 4.3.5 - Unauthenticated Blind SQL Injection

Because of this vulnerability, unauthenticated remote attackers can execute arbitrary SQL commands. Solution Update the plugin...

6.3AI score
SaveExploits0References1Affected Software1
Hacker One
Hacker One
added 2015/07/01 11:40 p.m.13 views

Shopify: Reflected XSS in chat

https://livechat.shopify.com/customer/chats/new?chat%5Bemail%5D=mymail%40mail.com&chat%5Bname%5D=My+Name&utmsource=partner&chat%5Btags%5D=123%27%5D%29;alert%281%29;//&chat%5Bmetadata%5D%5Bshopid%5D=90909090%22 Vulnerable param is chattags. If fill it with 123';alert1;// the XSS fill fire after...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2015/06/03 12:00 a.m.54 views

Boomchat 4.2 Shell Upload

| Title : boomchat-v4.2 Upload Vulnerability | Author : indoushka | email : [email protected] | Dork : no 4 noob | Tested on: Win8 fr pro | Bug : Upload | Download : www.20script.ir ======================================= 1- register in script 4 chat 2- change photo of profil 3- chang evil...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2015/05/17 12:00 a.m.32 views

Pure Faction game server buffer overflow

Buffer overflow via game chat...

4.7AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/04/20 12:00 a.m.25 views

Moodle 2.0.x < 2.0.5 / 2.1.x < 2.1.2 Multiple Vulnerabilities

Binary data 8713.prm...

6.8CVSS6.7AI score0.02118EPSS
SaveExploits0References13
CNVD
CNVD
added 2015/04/13 12:00 a.m.22 views

Quassel Denial of Service Vulnerability

Quassel aka Quassel IRC is a cross-platform distributed IRC chat client developed by the Quassel IRC team , which is developed using the QT application framework , PostgreSQL database to store data . A denial of service vulnerability exists in the message splitting feature of Quassel versions pri...

5CVSS6.8AI score0.02775EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/03/27 12:00 a.m.3 views

Softwebs Nepal Fast Chat 'loginprg.asp' Cross-Site Scripting Vulnerability

Softwebs Nepal Fast Chat is a chat software package developed by Softwebs Nepal team. A cross-site scripting vulnerability exists in Softwebs Nepal Fast Chat, which arises from the program's failure to adequately filter user-submitted input. When a user browses the affected site, their browser wi...

6.7AI score
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2015/03/26 12:00 a.m.21 views

Voodoo Chat index.php file_path Parameter PHP Code Execution - Ver2 (CVE-2006-3991)

A code execution vulnerability has been reported in Voc-project Voodoo Chat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS4.8AI score0.0249EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2015/03/21 12:00 a.m.22 views

Et-Chat 3.0.6 Cross Site Scripting

Exploit Title: Et-Chat 3.0.6 Cross Site Scripting Vulnerability Google Dork: "ET-Chat v3.0.6" Date: 2015-03-20 Exploit Author: IranHack Security Team Tested on: Windows 7 Vendor : Www.Et-chat.Ir Our Website : Www.IranHack.Org Vulnerable code : Location :...

7.4AI score
SaveExploits0
Patchstack
Patchstack
added 2015/02/20 12:00 a.m.30 views

WordPress Acobot Live Chat & Contact Form Plugin <= 2.0 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that change plugin settings or conduct cross-site scripting attacks. Solution Upgrade the plugin...

6.8CVSS3.1AI score0.01196EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2015/02/09 12:00 a.m.30 views

WordPress Acobot Live Chat And Contact Form 2.0 CSRF / XSS

Title: WordPress 'Acobot Live Chat & Contact Form' CSRF/XSS Version: 2.0 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/acobot/ Contacted WordPress: 2015/01/26 ========================================================== Plugin descriptio...

7.4AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/02/01 10:52 p.m.12 views

Telegram Messenger Offers Large File Sharing up to 1.5GB while you Chat

In spite of all the things smartphones can do, messaging remains one of the most popular activities. Popular messaging apps like WhatsApp, Viber, WeChat support text messages, voice calls, photo & video sharing features, but there is no provision for sharing every file types on these amazing...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2015/01/21 9:39 a.m.16 views

WhatsApp Web — New WhatsApp Feature Allows You to Chat From Your Browser

The most popular smartphone messaging service WhatsApp is now able to communicate with friends from their PC. No Rumours at all !! Enjoy WhatsApp from your desktop from now on. Last month, it was leaked that Whatsapp was working on a web client and finally from today they are introducing it to th...

6.7AI score
SaveExploits0
exploitpack
exploitpack
added 2015/01/20 9:38 p.m.14 views

Easy-Chat-Server-3.1

Easy Chat Server contains an overflow condition that is triggered as user-supplied input is not properly validated when handling input passed via the 'username' parameter to the /chat.ghp script. This may allow a remote attacker to cause a buffer overflow, resulting in a denial of service or...

1AI score
SaveExploits0
CNVD
CNVD
added 2015/01/08 12:00 a.m.10 views

Happy Chat Cross-Site Scripting Vulnerability

Happy Chat is a Java multi-user chat application . A cross-site scripting vulnerability in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via parameters...

4.3CVSS6AI score0.00966EPSS
SaveExploits1References1
NVD
NVD
added 2015/01/01 11:59 a.m.22 views

CVE-2011-5296

Cross-site scripting XSS vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...

4.3CVSS5.7AI score0.00966EPSS
SaveExploits1References1
Prion
Prion
added 2015/01/01 11:59 a.m.22 views

Cross site scripting

Cross-site scripting XSS vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...

4.3CVSS6.2AI score0.00966EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder