Lucene search
+L

393 matches found

Cvelist
Cvelist
•added 2026/05/22 12:00 a.m.•32 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

0.01112EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/05/22 12:00 a.m.•35 views

EUVD-2026-31472

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References2
CVE
CVE
•added 2026/05/22 12:00 a.m.•65 views

CVE-2026-36227

The Easy Chat Server 3.1 software is vulnerable to a Directory Traversal issue within its user registration handling at the /registresult.htm endpoint. The root cause is insufficient sanitization of the UserName parameter, which allows a remote attacker to supply traversal-style values (e.g., ../...

6.5CVSS6.6AI score0.01112EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/05/22 12:00 a.m.•27 views

CVE-2026-36228

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•29 views

Easy Chat Server 安全漏洞

Easy Chat Server is a LAN chat server software developed by Easy Chat Server Inc. Version 3.1 of Easy Chat Server contains a security vulnerability. This vulnerability stems from the UserName parameter, which allows for directory traversal. As a result, remote attackers may gain access to sensiti...

6.5CVSS6AI score0.01112EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•41 views

PT-2026-42804

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•28 views

PT-2026-42805

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.1AI score0.00479EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/05/22 12:00 a.m.•22 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/05/22 12:00 a.m.•17 views

CVE-2026-36228

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

6.6AI score0.00479EPSS
SaveExploits1References2
CVE
CVE
•added 2026/05/22 12:00 a.m.•64 views

CVE-2026-36228

The Easy Chat Server 3.1 software contains a buffer overflow vulnerability in the chat message functionality. A remote attacker can cause the service to terminate unexpectedly (Denial of Service) by submitting a chat message request with an oversized payload in the mtowho recipient field at the /...

7.3CVSS6.6AI score0.00479EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/05/22 12:00 a.m.•38 views

CVE-2026-36228

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

0.00479EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•27 views

Easy Chat Server 安全漏洞

Easy Chat Server is a LAN chat server software developed by Easy Chat Server Inc. Version 3.1 of Easy Chat Server has a security vulnerability. This vulnerability stems from a buffer overflow in the chat message function, which could allow remote attackers to obtain sensitive information and...

7.3CVSS6.3AI score0.00479EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/05/22 12:00 a.m.•18 views

CVE-2026-36227

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.6AI score0.01112EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/05/22 12:00 a.m.•40 views

EUVD-2026-31473

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.1AI score0.01112EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•9 views

CVE-2026-36228: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...

7.3CVSS6.4AI score0.00479EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•7 views

CVE-2026-36227: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter...

6.5CVSS6.4AI score0.01112EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/03/28 11:58 a.m.•11 views

CVE-2018-25221

EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized username parameter. Attackers can send a GET request to chat.ghp with a malicious username value containing shellcode and ROP gadgets...

9.8CVSS6.8AI score0.00822EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
•added 2026/03/22 3:31 p.m.•21 views

EUVD-2019-19967

Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter. Attackers can establish a session via the chat.ghp endpoint and then send a POST request to body2.ghp with an excessively large...

8.7CVSS5.9AI score0.00517EPSS
SaveExploits1References5
NVD
NVD
•added 2026/03/22 2:16 p.m.•22 views

CVE-2019-25613

Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter. Attackers can establish a session via the chat.ghp endpoint and then send a POST request to body2.ghp with an excessively large...

8.7CVSS0.00517EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/03/22 1:38 p.m.•8 views

CVE-2019-25613 Easy Chat Server 3.1 Denial of Service via message Parameter

Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter. Attackers can establish a session via the chat.ghp endpoint and then send a POST request to body2.ghp with an excessively large...

8.7CVSS5.9AI score0.00517EPSS
SaveExploits1References4
Rows per page
Query Builder