WordPress Chat-Room plugin v0.1.2 directory traversal/arbitrary file write Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Chat-Room plugin v0.1.2 directory traversal/arbitrary file write Date: 2017-03-08 Exploit Author: malwrforensics Vendor Homepage: https://webdevstudios.com/ Software Link: https://wordpress.org/plugins/chat-room/...

Phabricator: User with only Viewing Privilege can send message to Room

Hey, mongoose When the owner of a chat room gives any user Viewing Privilege, that user can then send messages to the room. As expected, there's no form to send messages when the user access the room since in theory it shouldn't be possible. However, messages via POST requests can still be sent a...

Teen Chat Room - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Teen Chat Room published at the 'play' market has multiple vulnerabilities...

Drupal Chat Room Module Information Disclosure Vulnerability

Drupal is a free and open source content management system developed in PHP. Chat Room is one of the modules used to set up the chat room feature on the Drupal website. Drupal Chat Room fails to properly check permissions when setting up websocket sockets for chat messages, which can be exploited...

CVE-2015-8601

The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors...

Design/Logic Flaw

The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors...

CVE-2015-8601

CVE-2015-8601 affects the Drupal Chat Room module for Drupal 7.x (versions before 7.x-2.2). The vulnerability arises from insufficient permission checks when establishing a websocket for chat messages, enabling remote attackers to bypass access controls and read messages in arbitrary chat rooms v...

CVE-2015-8601

The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors...

Chat Room - Moderately Critical - Access Bypass - SA-CONTRIB-2015-169

Chat Room enables site owners to integrate chats into nodes by adding the chat room field to them. The module relies on a websocket connection to send chat messages to the client. The module doesn't sufficiently validate access before setting up the websocket. As a result, users may receive...

Command injection

The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat...

Reuters Editor Indicted for Helping Hackers Break Into Tribune Co.

A Reuters social media editor on Thursday was charged with helping hackers break into the Tribune Co.’s network shortly after he was fired from a Sacramento television station in Fall 2010. A U.S. Eastern District grand jury in Sacramento handed down a three-count indictment against Matthew Keys,...

Mandriva Linux Security Advisory : pidgin (MDVSA-2012:029)

Multiple vulnerabilities has been discovered and corrected in pidgin : The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin)

Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace http://xxxxxxxxx.com/x7path/ to your target url. Dont forget replace...

X7 Chat 2.0.5.1 CSRF Add Admin Exploit

Exploit for php platform in category web applications Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace...

vBulletin vBShout 6.0.5 Cross Site Scripting

Title: vBulletin vBShout Module &username=&hours=&frommonth=0&fromday=&fromyear =0&endmonth=0&endday=&endyear=0&chatroomid=0&orderby=DESC&perpage=5&s=&do=archive&instanceid=1 http://www.site.com/vbshout.php?message="&s=&do=archive&instanceid=1 vBShout is the ideal way to keep members on your foru...

Pidgin < 2.10.2 Multiple DoS

The version of Pidgin installed on the remote host is earlier than 2.10.2 and is potentially affected by the following issues : - A denial of service vulnerability NULL pointer dereference in the 'pidginconvchatrenameuser' function in 'gtkconv.c'. Remote attackers can trigger the vulnerability by...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

DEBIAN-CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

Null pointer dereference

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...