WordPress WP Live Chat Support 6.2.03 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Stored Cross-Site Scripting vulnerability in WP Live Chat Support WordPress Plugin Abstract A stored Cross-Site Scripting vulnerability was found in the WP Live Chat Support WordPress Plugin. This issue can be exploited by an unauthenticated...

WP Live Chat Support < 6.2.04 - Stored Cross-Site Scripting (XSS)

The 3CX Live Chat WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

WordPress Live Chat Support Plugin <= 6.2.03 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Moodle 2.4.x < 2.4.5 / 2.5.x < 2.5.1 Multiple Vulnerabilities

Binary data 9417.prm...

Moodle 2.6.x < 2.6.2 Multiple Vulnerabilities

Binary data 9424.prm...

Moodle 2.5.x < 2.5.5 Multiple Vulnerabilities

Binary data 9423.prm...

WordPress Live Chat Support Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. An HTML injection vulnerability exists in versions of the WordPress Live Chat Support plugin prior to 6.2.02, which can be exploited by an attacker to run arbitrary...

WordPress WP Live Chat Support Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress WP Live Chat Support Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WP Live Chat Support < 6.2.02 - Stored Cross-Site Scripting

The 3CX Live Chat WordPress plugin was affected by a Stored Cross-Site Scripting security vulnerability...

WordPress Live Chat Support Plugin <= 6.2.01 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the yaws-chat package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Secret Chat Password Bypass Vulnerability

Secret Chat is a LAN chat tool. The tool suffers from a password bypass vulnerability when verifying account passwords. An attacker can attempt to crack the password and obtain user information...

The vulnerability of the Pidgin instant messaging system allows a remote attacker to trigger a service denial.

The Pidgin software contains a vulnerability in its component designed to work with the IRC protocol. Exploiting this vulnerability allows a malicious actor to induce a service failure by sending a specially crafted message...

Nextcloud: [Thirdparty] Stored XSS in chat module - nextcloud server 9.0.51 installed in ubuntu 14.0.4 LTS

I found stored XSS vulnerability in nextcloud server's chat module Nextcloud Server version - 9.0.51 OS - Ubuntu 14.0.4 Browser - Internet Explorer 11 Steps: 1 Login as non-admin userattacker and change full name containing XSS payload - elamaran'"alertdocument.domain 2 Login as...

“AC”triggered“bloodshed”-vulnerability warning-the black bar safety net

This month Microsoft released 6-months security update, fixes a high risk vulnerability. It can affect from Windows 9 5 to Windows 10 all editions of theoperating system. The vulnerability by Tencent basaltic laboratory finding, and is named BadTunnel it. Thus, the great TK guru again and again...

DNC Hacked, Research on Trump Stolen

Two separate APT groups believed to have ties to the Russian government have been fingered in attacks against the Democratic National Committee resulting in the theft of research done by the DNC on presumptive Republican nominee Donald Trump. Researchers at Crowdstrike, called in to investigate b...

Instacart: Authorization Bypass in Delivery Chat Logs

An authorization issue in the mobile app API allows any Instacart user to gain access to other users' order delivery chat logs. The /api/v2/orderdeliveries/:orderdeliveryid/orderchangelogs endpoint does not sufficiently check if the user has permissions to access that particular order's chat logs...

Facebook fixes allow an attacker to control any message of vulnerability-vulnerability warning-the black bar safety net

According to the relevant sources of information,Facebook's security technicians have successfully repaired the Facebook instant chat application of serious vulnerabilities. This vulnerability exists in both the Facebook Web end and mobile end of the program,the attacker can utilize this...

Facebook Messenger Vulnerability Patched

Update Facebook has patched a vulnerability in the desktop and Android mobile versions of its Messenger app that allows an attacker to access and modify chats. Researchers at Check Point Software Technologies privately disclosed the issue May 2 to Facebook, which patched it two weeks later. The...

LoL Chat (Free) - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application LoL Chat Free published at the 'play' market has multiple vulnerabilities...