133 matches found
EUVD-2011-4239
Malware in sbrugna...
EUVD-2005-2142
Malware in sbrugna...
EUVD-2020-18086
Malware in sbrugna...
EUVD-2006-2283
Malware in sbrugna...
EUVD-2019-5237
Malware in sbrugna...
EUVD-2022-3739
Malicious code in bioql PyPI...
EUVD-2021-30545
Malicious code in bioql PyPI...
EUVD-2022-52737
Malicious code in bioql PyPI...
EUVD-2022-31747
Malicious code in bioql PyPI...
EUVD-2023-32023
Malicious code in bioql PyPI...
GHSA-4FR9-3X69-36WV Flowise vulnerable to XSS
Summary A XSScross-site scripting vulnerability is caused by insufficient filtering of input by web applications. Attackers can leverage this XSS vulnerability to inject malicious script code HTML code or client-side Javascript code into web pages, and when users browse these web pages, the...
PT-2025-39022
Name of the Vulnerable Software and Affected Versions Dialogity Free Live Chat versions through 1.0.3 Description A flaw exists in Dialogity Free Live Chat that allows for Stored Cross-site Scripting XSS. This issue occurs due to improper neutralization of input during web page generation. The...
PT-2025-38976
Name of the Vulnerable Software and Affected Versions Casengo versions through 2.1.4 Description A Cross-Site Request Forgery CSRF issue exists in Casengo Live Chat Support, which also allows Stored Cross-Site Scripting XSS. The issue allows for potential malicious actions to be performed on beha...
Linux Distros Unpatched Vulnerability : CVE-2016-2087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. dot dot in the server nam...
CVE-2025-54868
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...
rocket.chat Incorrect Authorization Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 3000 by default. The issue results from...
Exploit for CVE-2025-51859
CVE-2025-51859 Vulnerability description Chaindesk, a w...
CVE-2024-42514
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to...
CVE-2024-24566
Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...