📄 LiveHelperChat 4.6.1 Cross Site Scripting

LiveHelperChat versions 4.61 and below suffer from multiple persistent cross site scripting vulnerabilities. Exploit Title: LiveHelperChat Live Help Configuration Telegram Bot. 3. In the Bot Username field, enter the following payload: " 4. Save the settings. 5. Revisit the Telegram configuration...

CVE-2025-51396

A stored cross-site scripting XSS vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Telegram Bot Username parameter...

CVE-2025-51396

A stored cross-site scripting XSS vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Telegram Bot Username parameter...

CVE-2025-49087

creationtimestamp| type| source ---|---|--- 2025-07-20 18:29:59+00:00| seen| Telegram/PhXpwkcDOk63hJQq91mQKS9kj8MfXpT-egc0wuI3V5JFc...

CVE-2025-46382

creationtimestamp| type| source ---|---|--- 2025-07-20 15:32:53+00:00| seen| Telegram/nVa-HZe63uHWHA0k18rDCUWNregLITcKqhfdOtfp3lQoEVg...

CVE-2025-46383

creationtimestamp| type| source ---|---|--- 2025-07-20 15:32:52+00:00| seen| Telegram/UCz81WIUE6f3Cc3OpRsPbW2mVYulo-nhScOYrFmcQVAxiow...

CVE-2025-51401

creationtimestamp| type| source ---|---|--- 2025-07-20 15:00:06+00:00| published-proof-of-concept| Telegram/V7wzcX4F-MozNLAT7FWP3rKubob7JBXGvac2G5pFurlt0fY...

CVE-2025-51397

creationtimestamp| type| source ---|---|--- 2025-07-20 15:00:06+00:00| published-proof-of-concept| Telegram/V7wzcX4F-MozNLAT7FWP3rKubob7JBXGvac2G5pFurlt0fY...

CVE-2025-51403

creationtimestamp| type| source ---|---|--- 2025-07-20 15:00:06+00:00| published-proof-of-concept| Telegram/V7wzcX4F-MozNLAT7FWP3rKubob7JBXGvac2G5pFurlt0fY...

CVE-2025-51400

creationtimestamp| type| source ---|---|--- 2025-07-20 15:00:06+00:00| published-proof-of-concept| Telegram/V7wzcX4F-MozNLAT7FWP3rKubob7JBXGvac2G5pFurlt0fY...

CVE-2025-51398

creationtimestamp| type| source ---|---|--- 2025-07-20 15:00:06+00:00| published-proof-of-concept| Telegram/V7wzcX4F-MozNLAT7FWP3rKubob7JBXGvac2G5pFurlt0fY...

Malicious code in aphorism-lib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95f15b2b497431703ff51667a4055e8172f9202aeeea0f725b0b0550812f3299 Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-191683 Malicious code in aphorism-lib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95f15b2b497431703ff51667a4055e8172f9202aeeea0f725b0b0550812f3299 Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in lazmat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 292e8512aa9e77a20a04a58cee3529ea31b9451e5c9067bbad7be57b5eb8c7fb Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-191779 Malicious code in lazmat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 292e8512aa9e77a20a04a58cee3529ea31b9451e5c9067bbad7be57b5eb8c7fb Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-191759 Malicious code in hkmat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3c3063747c35c5ae091331ac2c35dbef66c945aca73b06ee32ef1f0ec088009 Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in hkmat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3c3063747c35c5ae091331ac2c35dbef66c945aca73b06ee32ef1f0ec088009 Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in hekamhelp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac329f6244d2faf82ef12a167d1b46de2a9043fb1c086b67a45458d75d227562 Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-191750 Malicious code in hekamhelp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac329f6244d2faf82ef12a167d1b46de2a9043fb1c086b67a45458d75d227562 Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in talbat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa560ce194b853d26b02cc7a6fc99298c2b1de4516a8beb84b84475aa1fb23b3 Importing the module starts a telegram bot that connects to a chat and executes provided commands --- Category: MALICIOUS - The campaign has clearly malicious...