Yahoo Messenger - Free chat - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Messenger - Free chat published at the 'play' market has multiple vulnerabilities...

Simple keitai chat vulnerable to cross-site scripting

Overview Simple keitai chat provided by LEMON-S PHP contains reflected and stored cross-site scripting vulnerabilities CWE-79. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#05493467: Simple keitai chat vulnerable to cross-site scripting

Simple keitai chat provided by LEMON-S PHP contains reflected and stored cross-site scripting vulnerabilities CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Simple keitai chat Simple keitai chat is no longer being developed or maintained. It is...

OS X Gather Messages

This module will collect the Messages sqlite3 database files and chat logs from the victim's machine. There are four actions you may choose: DBFILE, READABLE, LATEST, and ALL. DBFILE and READABLE will retrieve all messages, and LATEST will retrieve the last X number of messages useful with 2FA...

GUYZ - Gay Chat & Gay Dating - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GUYZ - Gay Chat & Gay Dating published at the 'play' market has multiple vulnerabilities...

dev.bib.hs-hannover.de XSS vulnerability

Vulnerable URL: http://dev.bib.hs-hannover.de/chat/patron/ajaxinit.php?jsoncallback=prompt/OPENBUGBOUNTY/...

chat-tst2.coral.co.uk XSS vulnerability

Vulnerable URL: https://chat-tst2.coral.co.uk/chatweb/conf/coraltst2coral/widget?lang=%27/prompt%28%27OPENBUGBOUNTY%27%29/%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Slack Chat Detection - UDP #2

Binary data 9605.prm...

Slack Chat Detection - UDP #1

Binary data 9604.prm...

Slack Chat Detection via UDP

Binary data 9606.prm...

Irssi 'buf.pl' Local Information Disclosure Vulnerability

Irssi is a text-based IRC client program written in C by Timo Sirainen and released under the GPL GNU General Public License. A local information disclosure vulnerability exists in Irssi, which can be exploited by a local attacker to obtain sensitive information...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

HipChat - Chat Built for Teams - BSD license, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application HipChat - Chat Built for Teams published at the 'play' market has multiple vulnerabilities...

WordPress WP Live Chat Support Plugin 6.2.03 - XSS

WP Live Chat Support Plugin 6.2.03 is prone to a Cross-site scripting XSS vulnerability. This vulnerability allows to perform a number of arbitrary actions via wp-live-chat-support/functions.php line 1233. Solution Update the plugin. This vulnerability was fixed in 6.2.04...

WordPress Chat Plugin <= 1.0.8 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "message" parameter. Solution Update the plugin...

Cross site scripting

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4851

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-6178

Name of the Vulnerable Software and Affected Versions Let's PHP! simple chat versions prior to 2016-08-15 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For versions...

CVE-2016-4851: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...