Mail.ru: Gain access to random information via group chat "about" property

Vulnerability based on unfiltered size of data in "about" field. In case when data length stored in "about" field is more than 2^16 for example payload is 65537"A" server will return payload with additional suffix with random information. The size of suffix is increase with size of payload...

Easy Chat Server User Registeration Buffer Overflow (SEH) Exploit

This Metasploit module exploits a buffer overflow during user registration in Easy Chat Server software. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Easy Chat Server User Registeration Buffe...

Easy Chat Server User Registeration Buffer Overflow (SEH)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Easy Chat Server User Registeration Buffer Overflow SEH', 'Description' = %q This module exploits a buffer overflow during user registration in Ea...

Access Restriction Bypass

Moodle is vulnerable to access restriction bypass. The attacks exist because mod/chat/guisockets/index.php does not check for privileges for access to a daemon-mode Chat activity, allowing a malicious user unauthorized access to daemon-mode Chat activity...

CVE-2017-7663

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

CVE-2017-7663

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

CVE-2017-1000054

Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages...

CVE-2017-1000059

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users...

CVE-2017-1000059

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users...

Cross site scripting

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users...

Design/Logic Flaw

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

CVE-2017-7663: Improper Neutralization of Input During Web Page Generation

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

CVE-2017-1000059: Improper Neutralization of Input During Web Page Generation

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users...

CVE-2017-7663

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

CVE-2017-7663

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

CVE-2017-7663

CVE-2017-7663 corresponds to an XSS vulnerability in Apache OpenMeetings 3.2.0, affecting both global and Room chat. The issue is publicly described as a cross-site scripting flaw in the OpenMeetings 3.2.0 release, with remediation noted as a fix in version 3.3.0. The NVD entry lists CVSS scores ...

Zoho Chat - Team Communication - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Zoho Chat - Team Communication published at the 'play' market has multiple vulnerabilities...

Legal Robot: Intercom chat session information persists after logout

Hi team, While testing i look for session related issues but It seems that The Site is Will protected For such problems But a little Issue related to that i wanted to mention here... When A user Sign-In to his account he can see a Little chat button on Bottom right corner of the page After...

PT-2017-17869

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings version 3.2.0 Description The issue concerns an XSS attack vulnerability in both global and Room chat. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about...

CVE-2017-1000059

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users...