114 matches found
EUVD-2018-3147
Malware in sbrugna...
EUVD-2017-9623
Malware in sbrugna...
EUVD-2018-21456
Malware in sbrugna...
EUVD-2018-10188
Malware in sbrugna...
EUVD-2019-19268
Malware in sbrugna...
EUVD-2016-1873
Malware in sbrugna...
EUVD-2024-50871
Malicious code in bioql PyPI...
CVE-2024-12457
The Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escapi...
CVE-2019-12498
The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplcapipermissioncheck protection mechanism...
CVE-2019-14950
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page...
CVE-2017-18507
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS...
CVE-2022-2039
The Free Live Chat Support plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.0.11. This is due to missing nonce protection on the livesupportisettings function found in the /livesupporti.php file. This makes it possible for unauthenticated attacke...
CVE-2024-12457
CVE-2024-12457 : In the WordPress plugin “Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode” there is a Stored Cross‑Site Scripting vulnerability via the plugin shortcode ‘vchat’, affecting all versions up to 1.7.2 (per initial description). Exploitation ...
CVE-2024-12457 Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escapi...
WordPress plugin Chat Support for Viber 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...
Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program
Cybersecurity researchers have gleaned additional insights into a nascent ransomware-as-a-service RaaS called Cicada3301 after successfully gaining access to the group's affiliate panel on the dark web. Singapore-headquartered Group-IB said it contacted the threat actor behind the Cicada3301...
WordPress Better Chat Support plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Chat Help versions = 1.4.9...
WordPress Better Chat Support Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)
Software Better Chat Support Type Plugin Vulnerable versions = 1.4.9 Fixed in 1.6.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32110 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 871e512d4e62 Credits Dhabaleshwar Da...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...