Cross site scripting

Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode...

CVE-2020-26134

Live Helper Chat before 3.44v is affected by a stored XSS in chat messages via BBCode, exploitable by an operator. A security update 3.44v addresses this vulnerability. No details on exploitation beyond the described stored XSS are provided in the supplied documents.

PT-2020-16308 · Live Helper Chat · Livehelperchat

Name of the Vulnerable Software and Affected Versions: Live Helper Chat versions prior to 3.44v Description: The issue allows for stored XSS in chat messages with an operator via BBCode. This means that an attacker can inject malicious code into chat messages, which can then be executed by the...

CVE-2020-12456

A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform...

CVE-2020-6110

An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially crafted chat message can cause an arbitrary binary planting which could be abused to achieve arbitrary code execution. An attacker needs ...

Two Critical Flaws in Zoom Could've Let Attackers Hack Systems via Chat

If you're using Zoom —especially during this challenging time to cope with your schooling, business, or social engagement—make sure you are running the latest version of the widely popular video conferencing software on your Windows, macOS, or Linux computers. No, it's not about the arrival of th...

File Sharing&Chat v1.0 iOS - Denial of Service Vulnerability

Document Title: =============== File Sharing&Chat v1.0 iOS - Denial of Service Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2222 Release Date: ============= 2020-04-26 Vulnerability Laboratory ID VL-ID:...

Mail.ru: [c-api.city-mobil.ru] IDOR chat messages between driver and customer

UUIDv1 was used as identifier in c-api.city-mobil.ru for some APIs where identifier was intended to be non-brutable while UUIDv1 entropy is insufficient...

Telegram Messenger for iOS and Android Information Disclosure Vulnerability

Telegram Messenger for iOS and Android is a suite of mobile messaging tools based on the iOS and Android platforms. An information disclosure vulnerability exists in Telegram Messenger version 2.6 for iOS and Telegram Messenger version 1.8.2 for Android. The vulnerability can be exploited to obta...

The vulnerability of the Telegram Messenger messaging app allows a hacker to gain access to messages in the secret chat.

The vulnerability of the cleartext component in the Telegram Messenger application is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to messages in the secret chat by reading the memory regions used...

WhatsApp Could Offer 'Like' and 'Mark as Unread' Features Soon

The popular instant messaging app WhatsApp might adopt some features from its parent company, Facebook. The messaging giant is testing some new features that might be coming to the app soon. The features include a 'Like' button similar to that of Facebook and a 'Mark as Unread' feature for chat...

iWifi for Chat v1.1 iOS - Denial of Service Vulnerability

Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...

iWifi for Chat v1.1 iOS - Denial of Service Vulnerability

Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...

BlueMe Bluetooth v5.0 iOS - Code Execution Vulnerability

Document Title: =============== BlueMe Bluetooth v5.0 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1251 Release Date: ============= 2014-04-07 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2013-3044

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...

Code injection

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...

CVE-2013-3044

CVE-2013-3044 affects IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1, where remote authenticated users can spoof the origin of chat messages or publish anonymous messages by abusing meeting-attendance privileges. The issue lies in the meeting server’s handling of attendan...

CVE-2013-3044

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...

Facebook virus spreads via photo album chat messages !

A new social networking worm in the vein of Koobface is currently doing the rounds. A Naked Security reader, George, who had been exposed to it on Facebook reported it to us - unlike the majority of Facebook scams we report, this one actively infects your computer with malware instead of simply...

Debian Security Advisory DSA 1386-1 (wesnoth)

The remote host is missing an update to wesnoth announced via advisory DSA 1386-1. OpenVAS Vulnerability Test $Id: deb13861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1386-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...