Hardcoded credentials

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...

Design/Logic Flaw

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input...

Code injection

Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...

CVE-2013-4100

Cryptocat is affected by a remote denial-of-service vulnerability in versions before 2.0.22, exploitable via the username parameter. Impact per sources is a denial of service without requiring user interaction. The issue is fixed by upgrading to 2.0.22 or later. Affected product: Cryptocat (open-...

CVE-2013-4100

Cryptocat before 2.0.22 has Remote Denial of Service via username...

CVE-2013-4101

Cryptocat (versions before 2.0.22) is affected by CVE-2013-4101 due to a Link Markup Decorator HTML Handling Weakness. The vulnerability enables the generation of invalid HTML code within the application’s markup processing. Red Hat and CNVD entries corroborate the same affected version range and...

CVE-2013-4101

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...

CVE-2013-4102

Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...

CVE-2013-4102

CVE-2013-4102 affects Cryptocat prior to 2.0.22 due to a weakness in strophe.js Math.random() RNG. Public sources in the provided documents describe it as a randomness weakness that can impact confidentiality and integrity (per NVD CVSSv2 6.4, CVSSv3.1 9.1). Connected records repeatedly reference...

CVE-2013-4103

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input...

CVE-2013-4103

Cryptocat prior to 2.0.22 is vulnerable to Remote Script Injection caused by improper sanitization of user input. Affected software: Cryptocat (versions before 2.0.22). Impact per sources: potential arbitrary script execution in the context of the application. Remediation: upgrade to Cryptocat 2....

Cryptocat Script Insertion

Cryptocat is prone to an arbitrary script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code within the context of the application. Versions prior to Cryptocat 2.0.22 are vulnerable...

Cryptocat Arbitrary Script Injection Vulnerability

Exploit for multiple platform in category remote exploits source: http://www.securityfocus.com/bid/61093/info Cryptocat is prone to an arbitrary script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script...

Telegram Messenger Offers Large File Sharing up to 1.5GB while you Chat

In spite of all the things smartphones can do, messaging remains one of the most popular activities. Popular messaging apps like WhatsApp, Viber, WeChat support text messages, voice calls, photo & video sharing features, but there is no provision for sharing every file types on these amazing...

miniLock - Open Source File Encryption Tool from CryptoCat Developer

It’s the age of surveillance what made the Use of Encryption so widely that it has become a need of law enforcement agencies, cyber criminals as well as every individual. But, encryption is not so easy. To solve this problem, a 23-year old Cryptocat developer Nadim Kobeissi is ready to release a...

Cryptocat offers End-to End Encryption For Facebook Messenger

It’s an era of Mass Surveillance, where Encryption has become more important today for all of us than any other time in the History. But the trouble is that Crypto programs are too hard for Non-Internet-Savvy to implement and use. Time is loudly announcing the need to switch to some alternatives...

Encrypted Chat Service 'Cryptocat' released iOS app

http://end-to-end%20encryption%2C%20nsa%2C%20cryptocat%2C%20ios%2C%20apple%20app%20store%2C%20download%20app%2C%20secure%20chat%2C%20off-the-record%20messaging%2C...

[Cryptocat] Chat Client with encrypted conversations on iPhone and Android

Cryptocat is an experimental browser-based chat client for easy to use, encrypted conversations. It aims to make encrypted, private chat easy to use and accessible. We want to break down the barrier that prevents the general public from having an accessible privacy alternative that they already...

Cryptocat, a Secure and Encrypted chat blocked in Iran

Users in Iran call Internet as "Filternet", because of the heavily censored Internet access they have. Million Iranians used VPN servers to access the outside world. In October, 2013 Jack Dorsey, the co-founder of Twitter asked Iranian President, 'Are citizens of Iran able to read your tweets?' I...

Cryptocat, a Secure and Encrypted chat blocked in Iran

Users in Iran call Internet as "Filternet", because of the heavily censored Internet access they have. Million Iranians used VPN servers to access the outside world. In October, 2013 Jack Dorsey, the co-founder of Twitter asked Iranian President, 'Are citizens of Iran able to read your tweets?' I...