Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/08 1:23 a.m.•22 views

CVE-2025-51401

Título del Exploit: LiveHelperChat 4. Guarda los...

5.4CVSS6.5AI score0.00923EPSS
SaveExploits4References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 8:46 a.m.•22 views

Malicious code in bigops-chat-transfer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8d11b7e8abee5caddc5c2f1765fa7f10d40c8cce0ef1cafed55fe31537be94 On require of bigops-chat-transfer, platform.js reconstructs one of three Cloudflare workers.dev hostnames from split string fragments...

5.7AI score
SaveExploits0References1
OSV
OSV
•added 2026/08/05 8:46 a.m.•10 views

MAL-2026-12156 Malicious code in bigops-chat-transfer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8d11b7e8abee5caddc5c2f1765fa7f10d40c8cce0ef1cafed55fe31537be94 On require of bigops-chat-transfer, platform.js reconstructs one of three Cloudflare workers.dev hostnames from split string fragments...

5.7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/23 12:57 a.m.•25 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.4CVSS5.8AI score0.00923EPSS
SaveExploits4References1
Exploit DB
Exploit DB
•added 2025/07/22 12:00 a.m.•277 views

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via the Chat Transfer Function

Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting XSS via the Chat Transfer Function Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software...

5.4CVSS5.2AI score0.00923EPSS
SaveExploits4
Cvelist
Cvelist
•added 2025/07/21 12:00 a.m.•29 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

0.00923EPSS
SaveExploits4References3
Vulnrichment
Vulnrichment
•added 2025/07/21 12:00 a.m.•5 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.3AI score0.00923EPSS
SaveExploits4References3
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•16 views

live helper chat 安全漏洞

live helper chat is an open source plugin from an individual developer that supports online chat. It provides chat functionality for web platforms. A security vulnerability exists in live helper chat version v4.60, which stems from insufficient validation of the operator name parameter input in t...

5.4CVSS5.7AI score0.00923EPSS
SaveExploits4References5
OSV
OSV
•added 2025/07/21 12:00 a.m.•16 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.4CVSS5.2AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/21 12:00 a.m.•3 views

CVE-2025-51401: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.4CVSS6.1AI score0.00923EPSS
SaveExploits4References1
Mend
Mend
•added 2025/07/21 12:00 a.m.•2 views

CVE-2025-51401

A stored cross-site scripting XSS vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter...

5.4CVSS0.00923EPSS
SaveExploits4References5
Rows per page
Query Builder