9924 matches found
mondeapp - Chat Translator - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application mondeapp - Chat Translator published at the 'play' market has multiple vulnerabilities...
See how I withdraw your QQ message, not fix-bug warning-the black bar safety net
0x01 Specific ideas: In with the PC end of windows chat, First you need to put the QQ chat friends window using colorful bubbles off, Then you send each other a message,right click your message, There will be a withdraw option,don't worry. point, Waiting for the other to send a message to come ov...
iOS song of ice and fire fan outside the post - App Hook the Q & A and iOS 9 bash shell-vulnerability warning-the black bar safety net
In the previous Chapter we talked about in a non-jailbreak iOS on the App Hook. Using this technique, you can be in a non-jailbreak iOS on the system to achieve a variety of hook features, e.g., micro-channel auto-grab a red envelope, the automatic chat robot, game plug-in, etc. But because of...
Script* Log-Chat Cross-Site Scripting Vulnerability
Script Log-Chat is a suite of web chat tools from Script Japan. A cross-site scripting vulnerability exists in the logchat.cgi file in Script Log-Chat versions prior to 2.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2016-1157
Cross-site scripting XSS vulnerability in logchat.cgi in Script Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1157
Cross-site scripting XSS vulnerability in logchat.cgi in Script Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1157
Cross-site scripting XSS vulnerability in logchat.cgi in Script Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1157
CVE-2016-1157 is a stored XSS vulnerability in Script* Log-Chat's log_chat.cgi for versions prior to 2.0. A remote attacker can inject arbitrary web script/HTML, potentially executing in the victim’s browser. Affected product: Script* Log-Chat (Log-Chat) prior to version 2.0. Root cause: cross-si...
CVE-2016-1157: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in logchat.cgi in Script Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2016-4611
Name of the Vulnerable Software and Affected Versions Script Log-Chat versions prior to 2.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve t...
Log-Chat vulnerable to cross-site scripting
Overview Log-Chat provided by Script contains a stored cross-site scripting vulnerability CWE-79. Masamu Asato of National Institute of Technology, Okinawa College reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...
JVN#93535632: Log-Chat vulnerable to cross-site scripting
Log-Chat provided by Script contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products Affected Log-Ch...
Mail.ru: Stored XSS на street-combats.mail.ru
Stored XSS via chat message in street-combats.mail.ru project. street-combats.mail.ru is out of scope of Mail.Ru bug bounty program...
Zendesk: Chat History CSV Export Excel Injection Vulnerability
I have found a vulnerability in the Chat History export function. If an attacker submits a special name containing a system command when chatting with an agent and that agent later exports the history of that chat to CSV, the resulting CSV may execute commands when opened. I have tested this usin...
Disabled PadCrypt Ransomware Includes Live Chat, Uninstaller
Several flavors of ransomware, most notably Cryptowall, have come packaged with support features. But a new piece of crypto-ransomware called PadCrypt has upped the game with a live chat feature that victims can use to interact with the attackers about ransom payments and other information...
ATutor 2.2 - Multiple Cross-Site Scripting Vulnerabilities
ATutor 2.2 - Multiple Cross-Site Scripting Vulnerabilities Security Advisory - Curesec Research Team 1. Introduction Affected Product: Atutor 2.2 Fixed in: partly in ATutor 2.2.1-RC1, complete in 2.2.1 Fixed Version Link: http://www.atutor.ca/atutor/download.php Vendor Website:...
Cisco Jabbar chat client vulnerability to man in the middle attacks-vulnerability warning-the black bar safety net
Cisco released an official announcement that its chat clients Jabbar in the presence of security vulnerabilities, vulnerable to a middleman attack. The vulnerability exists on the Windows platform-Jabbar, an unauthorized remote attacker can exploit the vulnerability to implement STARTTLS downgrad...
CVE-2015-7782
Cross-site scripting XSS vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
