PT-2020-16309 · Live Helper Chat · Livehelperchat

Name of the Vulnerable Software and Affected Versions: Live Helper Chat versions prior to 3.44v Description: The issue allows reflected XSS via the setsettingajax PATH INFO. This can potentially lead to malicious script execution. Recommendations: For versions prior to 3.44v, update to version...

Denial Of Service (DoS)

ncmpc is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference flaw that occurs if a user uses the chat screen and another client sends a long chat message...

recursos.videochatprovider.com Cross Site Scripting vulnerability OBB-1347050

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Mail.ru: [api.my.games/social/chat/multi/add] Privilege escalation on adding new members to group chat

Privilege escalation in chat management functionality on store.my.games...

CVE-2020-13972

Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951...

CVE-2020-13972

Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951...

Design/Logic Flaw

Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951...

CVE-2020-13972

CVE-2020-13972 in Enghouse Web Chat 6.2.284.34 is an XSS vulnerability triggered when a user supplies their own domain in the WebServiceLocation parameter; the POST response can display external JavaScript from a attacker-controlled server. This entry is tied to CVE-2019-16951, which Red Hat and ...

CVE-2020-13972

Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951...

New Web-Based Credit Card Stealer Uses Telegram Messenger to Exfiltrate Data

Cybercriminal groups are constantly evolving to find new ways to pilfer financial information, and the latest trick in their arsenal is to leverage the messaging app Telegram to their benefit. In what's a new tactic adopted by Magecart groups, the encrypted messaging service is being used to send...

lets-chat-kerberos (>=0.2.0, <=0.4.1), passport-assistant-kerberos (0.0.1) +1 more potentially affected by CVE-2016-1000238 via node-krb5 (0.0.6)

node-krb5 NPM version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-krb5 and may be impacted: - lets-chat-kerberos =0.2.0, =0.4.1 - passport-assistant-kerberos 0.0.1 - passport-kerberos 0.0.1 Source cves: CVE-2016-1000238 Source advisory:...

chat.nerdswhoprogram.com Cross Site Scripting vulnerability OBB-1288243

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Mail.ru: CSRF Delete chat invitation link.

CSRF vulnerability in api.my.games allowed to delete chat invitation link with crossite request...

Mitel MiVoice Connect Client Remote Code Execution Vulnerability

Mitel MiVoice Connect is Mitel Networks Canada's software for centralized management of Mitel Networks' call handling and collaboration tools. A remote code execution vulnerability exists in Mitel MiVoice Connect client versions prior to 214.100.1223.0. The vulnerability is related to the affecte...

CVE-2020-23576

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...

CVE-2020-23576

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...

Cross site scripting

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting XSS via the chat tab...

CVE-2020-23983

Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags...

CVE-2020-23983

CVE-2020-23983 affects Michael-design iChat Realtime PHP Live Support System 1.6. The vulnerability is a persistent Cross-site Scripting (XSS) flaw triggered via chat and text-field tags, attributed to an input handling issue in the affected component. The provided sources describe the issue but ...

CVE-2020-23974

Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...