9929 matches found
Live.me - #1 video chat app - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application Live.me - 1 video chat app published at the 'play' market has multiple vulnerabilities...
Paltalk - Free Video Chat - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Paltalk - Free Video Chat published at the 'play' market has multiple vulnerabilities...
Camfrog - Group Video Chat - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Camfrog - Group Video Chat published at the 'play' market has multiple vulnerabilities...
Live Helper Chat 2.58v Cross Site Scripting Vulnerability
Exploit for php platform in category web applications COMPASS SECURITY ADVISORY https://www.compass-security.com/en/research/advisories/ CSNC ID: CSNC-2017-004 Product: Live Helper Chat 1 Vendor: Live Helper Chat Subject: Cross-Site Scripting - XSS Risk: High Effect: Remotely exploitable Author:...
Live Helper Chat 2.58v Cross Site Scripting
COMPASS SECURITY ADVISORY https://www.compass-security.com/en/research/advisories/ CSNC ID: CSNC-2017-004 Product: Live Helper Chat 1 Vendor: Live Helper Chat Subject: Cross-Site Scripting - XSS Risk: High Effect: Remotely exploitable Author: Sylvain Heiniger [email protected]...
Atlassian Resets HipChat Passwords Following Breach
Atlassian reset user passwords for its group chat service HipChat on Monday following an incident that may have resulted in unauthorized access to a server used by the service. The company began warning users Monday via email that as a result an attacker may have secured access to user informatio...
Atlassian's HipChat Hacked — Users' Data May Have Been Compromised
Atlassian's group chat platform HipChat is notifying its users of a data breach after some unknown hacker or group of hackers broke into one of its servers over the weekend and stole a significant amount of data, including group chat logs. What Happened? According to a security notice published o...
UBUNTU-CVE-2017-8073
WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the ircctcpdccfilenamewithoutquotes function during quote removal, with a buffer overflow...
ALPINE-CVE-2017-8073
WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the ircctcpdccfilenamewithoutquotes function during quote removal, with a buffer overflow...
LOVOO - Free Dating Chat - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application LOVOO - Free Dating Chat published at the 'play' market has multiple vulnerabilities...
The vulnerability of the Telegram Messenger messaging app allows a hacker to gain access to messages in the secret chat.
The vulnerability of the cleartext component in the Telegram Messenger application is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to messages in the secret chat by reading the memory regions used...
The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.
The vulnerability of Microsoft Exchange Server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code via email or chat clients...
Mail.ru: Stored XSS in e.mail.ru (payload affect multiple users)
Hi, We have found a high risk level STORED XSS in e.mail.ru chat, the status change function allow to inject malicious payload in javascript & HTML, The attack affect multiple users and run in auto mode, no need a user interaction. Vulnerability affect any user that have been invited to your chat...
CVE-2017-0881
An error in the implementation of an autosubscribe feature in the checkstreamexists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affec...
CVE-2017-0881
CVE-2017-0881 affects Zulip Server prior to 1.4.3. The issue is in the autosubscribe feature of the check_stream_exists route, allowing an authenticated user to subscribe to a private stream that should require an invitation from an existing member. This could bypass access controls and expose pr...
Omegle Clone 2.0 SQL Injection
Title: Omegle Clone 2.0 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.turnkeycentral.com Vendor URL: http://www.turnkeycentral.com/scripts/omegle-clone/ Product: Omegle Clone 2.0 Google Dork: N/A Product & Service Introduction: "Omegle Clone" Start Your own chat service like Omegle. B...
CVE-2017-0110
Cross-site scripting XSS vulnerability in Microsoft Exchange Outlook Web Access OWA allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."...
CVE-2017-0110: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Microsoft Exchange Outlook Web Access OWA allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."...
