8066 matches found
CVE-2011-4304
CVE-2011-4304 affects Moodle chat functionality (versions 2.0.x prior to 2.0.5 and 2.1.x prior to 2.1.2). The cited issue enables remote authenticated users to discover the name of another user via a beep operation. The PT-2012-1852 entry confirms affected versions and provides remediation guidan...
PT-2012-1852 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description: The issue affects the chat functionality, allowing remote authenticated users to discover the name of any user via a beep operation. Recommendations: For...
PHP Online Chat v1.0 Multiple Vulnerabilties
Exploit for php platform in category web applications PHP Online Chat v1.0 Multiple Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://phponlinechat.com/ .:. Tested On Demo :...
Quick Chat <= 3.41 - SQL Injection
The Quick Chat WordPress plugin was affected by a SQL Injection security vulnerability...
Useresponse 1.0.2 - Privilege Escalation / Remote Code Execution
!/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles @bclose and mrme @netninja exploit by...
Et-Chat Shell Upload
-------------------- IN The NAme OF God -------------------- -====Et-chat remote file uploader RFU====- Exploit Title:Et-chat remote file uploader RFU Exploit Author: FarbodEZRaeL Tested on: xp MAil : [email protected] -====Dork====- inurl:/styles/admintpl/ -====Exploit====-...
Active Collab "chat module" Remote PHP Code Injection Exploit
This module exploits an arbitrary code injection vulnerability in the chat module that is part of Active Collab versions 2.3.8 and earlier by abusing a pregreplace using the /e modifier and its replacement string using double quotes. The vulnerable function can be found in...
Active Collab "chat module" 2.3.8 Remote PHP Code Injection
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Active Collab "chat module" %q This...
Active Collab "chat module" <= 2.3.8 Remote PHP Code Injection Exploit
Exploit for php platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' cla...
Pidgin OTR Plugin Detection
The remote host has the Pidgin OTR Off-the-Record plugin installed. This plugin allows for secure, encrypted communication between parties using the Pidgin instant messaging software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59194; scriptversion"1.8";...
X7 Chat 2.0.5.1 and below version CSRF add Administrator the defect and repair-vulnerability warning-the black bar safety net
Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Key words: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Author: DennSpec download address: http://x7chat.com/releases/v2/x7chat2051.zip Affected versions: = 2.0.5.1 First register for a username frame.html in the path of your main html page html bod...
X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin)
X7 Chat 2.0.5.1 - Cross-Site Request Forgery Add Admin Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace...
X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin)
Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace http://xxxxxxxxx.com/x7path/ to your target url. Dont forget replace...
X7 Chat 2.0.5.1 Cross Site Request Forgery
Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace http://xxxxxxxxx.com/x7path/ to your target url. Dont forget replace...
X7 Chat 2.0.5.1 CSRF Add Admin Exploit
Exploit for php platform in category web applications Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace...
ChatBlazer Flash Chat Cross Site Scripting
Exploit Title: ChatBlazer Flash Chat Cross Site Scripting Date: 19.04.2012 Author: Sony Software Link: www.chatblazer.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/04/chatblazer-flash-chat-cross-site.html...
Seditio Chat 1.0 Cross Site Request Forgery
========================================================= Vulnerable Software: Seditio Chat Plugin Chat İndex Plugin v 1.0 http://www.seditio-eklenti.com/page.php?id=418 http://www.seditio-eklenti.com/chat-plugin-index-d418.html Downloaded: http://www.seditio-eklenti.com/datas/users/1-chat.rar MD...
Nimbuzz 2.2.0 Cross Site Scripting
Exploit Title: Nimbuzz 2.2.0 Cross Site Scripting Date: 09.04.2012 Author: Sony Software Link: http://www.nimbuzz.com/en/get/voip-and-chat-on-pc/pc-client-downloaded Software Version: 2.2.0 Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com...
Linux Gather XChat Enumeration
This module will collect XChat's config files and chat logs from the victim's machine. There are three actions you may choose: CONFIGS, CHATS, and ALL. The CONFIGS option can be used to collect information such as channel settings, channel/server passwords, etc. The CHATS option will simply...
OS X Gather Colloquy Enumeration
This module will collect Colloquy's info plist file and chat logs from the victim's machine. There are three actions you may choose: INFO, CHATS, and ALL. Please note that the CHAT action may take a long time depending on the victim machine, therefore we suggest to set the regex 'PATTERN' option ...