[SECURITY] Fedora 45 Update: chatty-0.8.9-11.fc45

Chatty is a libpurple based messaging client for mobile phones, works best with the phosh mobile DE...

EUVD-2006-2605

Malware in sbrugna...

User Perceptions and Attitudes toward Untraceability in Messaging Platforms

Mainstream messaging platforms offer a variety of features designed to enhance user privacy, such as disappearing messages, password-protected chats, and end-to-end encryption E2EE, which primarily protect message contents. Beyond contents, the transmission of messages generates metadata that can...

Hackers Are Calling Your Office: FBI Alerts Law Firms to Luna Moth’s Stealth Phishing Campaign

The U.S. Federal Bureau of Investigation FBI has warned of social engineering attacks mounted by a criminal extortion actor known as Luna Moth targeting law firms over the past two years. The campaign leverages "information technology IT themed social engineering calls, and callback phishing...

CVE-2006-2606

Cross-site scripting XSS vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username...

Cross site scripting

Cross-site scripting XSS vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username...

CVE-2006-2606

Cross-site scripting XSS vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username...

CVE-2006-2606

The CVE-2006-2606 entry describes a Cross-site Scripting (XSS) vulnerability in the Chatty application, possibly affecting version 1.0.2 and other versions. The flaw enables remote attackers to inject arbitrary web script or HTML by manipulating the username field in the login or input workflow. ...

Chatty improper input sanitizing

Chatty improper input sanitizing Discovered by: Nomenumbra Date: 21/5/2006 impact:moderate possible defacement Chatty is a PHP-based chatscript allowing users to chat over the web. Subscribing with a username like this: scriptalert22xss22/script would cause major xss in the chatroom. Nomenumbra...

CVE-2006-2606: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username...