9925 matches found
CVE-2016-5050
Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file...
CVE-2016-5049
Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter...
CVE-2016-5048
SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...
CVE-2016-5048
CVE-2016-5048 affects ReadyDesk 9.1 and targets the chat/staff/default.aspx login input. The user name field is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is described in multiple sources (NVD entry and CERT/CC advisory) with a high...
CVE-2016-5050
CVE-2016-5050 is an uncontrolled/ unrestricted file upload vulnerability within ReadyDesk 9.1, exploitable via chat/sendfile.aspx to upload a .aspx file and execute arbitrary code. The NVD entry documents an attack path that requires no authentication and network access, with a high severity (CVS...
PT-2016-6227
Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the user name field in the chat/staff/default.aspx page. Recommendations For ReadyDesk version 9.1, consider restricting acce...
PT-2016-6228
Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter in the...
PT-2016-6229
Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description The issue allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file due to an unrestricted file upload vulnerability in the chat/sendfile.aspx endpoint. Recommendations For...
CVE-2016-5049: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter...
CVE-2016-5048: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...
CVE-2016-5050: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file...
Simple Chat Cross-Site Scripting Vulnerability
Simple Chat is a PHP and MySQL based Web chat program . A cross-site scripting vulnerability exists in versions of Simple Chat prior to 2016/08/15. An attacker can exploit this vulnerability to execute arbitrary script code...
simple chat vulnerable to cross-site scripting
Overview simple chat provided by Let's PHP! contains a cross-site scripting vulnerability CWE-79. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary...
JVN#42262137: simple chat vulnerable to cross-site scripting
simple chat provided by Let's PHP! contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products Affected simple...
Omegle, the Popular 'Chat with Strangers' Service Leaks Your Dirty Chats and Personal Info
Ever since the creation of online chat rooms and then social networking, people have changed the way they interact with their friends and associates. However, when it comes to anonymous chatting services, you don't even know what kinds of individuals you are dealing with. Sharing identifiable...
Scorp - Video Chat Rooms - Customized SSL, Exported ContentProvider, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Scorp - Video Chat Rooms published at the 'play' market has multiple vulnerabilities...
WordPress Plugin WP Live Chat Support Stored Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. WordPress plugin WP Live Chat Support has a stored cross-site scripting vulnerability that can be exploited by an attacker to log in as a WordPress user and perform...
WordPress WP Live Chat Support(6.2.03) plugin stored XSS
No description provided by source. !/usr/bin/python -- coding: utf-8 -- from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from pocsuite.api.utils import randomStr import urllib import re class TestPOCPOCBase: name = 'WordPress WP Live Chat...
Secure chat software Telegram will reveal in which the Copy-Paste of the text-vulnerability warning-the black bar safety net
! Security researcher Kirill Firsov found,currently more popular chat app Telegram the occurrence of a data breach. In OS X versions, the application will take the user to copy and paste the text is written to the/var/log/system. log filethe file is also known as syslog ,and thus the private...
World Of Warcraft recruitment: a command line can hijack your game with the hijacking code and video-bug warning-the black bar safety net
! Recently there has been a relates to the social worker, the technology, the new game attack of the Scam, the attacker uses the world of Warcraft World of Warcraft, WoW game plug-in a hidden function. New attacks Imagine this Scene: the game one looks like a well-known Guild members of a role,...