21 matches found
EUVD-2026-96552
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user to publish or unpublish other users' AI applications. Low-privileged attackers can send POST requests to /airag/app/release to obtain share tokens...
CVE-2026-19000
A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-19000 JeecgBoot Anonymous Chat Attachment send server-side request forgery
A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-19000
A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-19000
CVE-2026-19000 affects JeecgBoot up to version 3.9.2. The vulnerability resides in the Anonymous Chat Attachment Parser component, specifically the /airag/chat/send function, enabling server-side request forgery (SSRF). The attack is network-based, requires no user interaction or privileges, and ...
CVE-2026-19000 JeecgBoot Anonymous Chat Attachment send server-side request forgery
A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-19000: Server-Side Request Forgery (SSRF)
A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly...
PT-2026-68383
Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.3 Description A server-side request forgery SSRF issue exists in the Anonymous Chat Attachment Parser component. A remote attacker can exploit this by manipulating an unknown function within the '/airag/chat/sen...
tc Tor Chat Client 1.3
tc is a low-tech free solution to make yourself anonymously reachable for chat by anyone who only know your onion address and your public key. Messages are PGP encrypted end-to-end and forwarded by Tor's relays...
EUVD-2022-0183
Malicious code in bioql PyPI...
EUVD-2022-0186
Malicious code in bioql PyPI...
EUVD-2022-0187
Malicious code in bioql PyPI...
PYSEC-2022-42
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions chat participants can spoof their channel leave message, tricking others into assuming they left the chatroom...
Anonymous chat Bobbin - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Anonymous chat Bobbin published at the 'play' market has multiple vulnerabilities...
Anonymous Chat - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Anonymous Chat published at the 'play' market has multiple vulnerabilities...
Anonymous Chat - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Anonymous Chat published at the 'play' market has multiple vulnerabilities...
Instachat:Anonymous Chat Rooms - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Instachat:Anonymous Chat Rooms published at the 'play' market has multiple vulnerabilities...
Anonymous chat - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Anonymous chat published at the 'play' market has multiple vulnerabilities...
Code injection
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...
CVE-2013-3044: Undefined Security Weakness
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...