333 matches found
CVE-2017-9544
CVE-2017-9544 Exploit para desbordamiento de búfer basado en SEH en Easy Chat Server CVE-2017-9544 Basado en: pwntools msfvenom / reversetcp payload ropper x64dbg Aplicación vulnerable disponible en https://www.exploit-db.com/exploits/42155 Configuración Configurar IP de víctima a 192.168.15.100 ...
CVE-2026-36227
CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC Este repositorio contiene una prueba de concepto benigna para CVE-2026-36227, un problema de path traversal en el manejo del registro de usuarios de Easy Chat Server 3.1. Este repositorio es únicamente para investigación de segurida...
CVE-2026-36228
CVE-2026-36228: PoC de Denegación de Servicio en mensajes de chat mtowho de Easy Chat Server 3.1 Este repositorio contiene una prueba de concepto benigna por defecto para CVE-2026-36228, un problema de denegación de servicio en el manejo de mensajes de chat de Easy Chat Server 3.1. Este repositor...
CVE-2026-9548
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks...
CVE-2026-9491
A server-ide request forgery SSRF vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information...
CVE-2026-40541
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...
EUVD-2026-67463
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks...
CVE-2026-9548
Synology Chat Server versions prior to 2.4.5-22148 are affected by a Cross-Site Scripting (XSS) vulnerability in the extract domain function, caused by improper neutralization of input during web page generation. A remote authenticated user with low privileges can exploit this via a UI interactio...
CVE-2026-9548
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks...
CVE-2026-9491
A Server-Side Request Forgery (SSRF) vulnerability in the webhook component of Synology Chat Server prior to 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information. The CVSS v3.1 score is 4.3 (Medium) with a network attack vector, low complexity, and low privileges requ...
EUVD-2026-67462
A server-ide request forgery SSRF vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information...
CVE-2026-9491
A server-ide request forgery SSRF vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information...
CVE-2026-40541
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...
EUVD-2026-67461
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...
CVE-2026-40541
Synology Chat Server before 2.4.5-22148 contains an improper input neutralization vulnerability in the extract domain component, classified as a cross-site scripting (XSS) flaw. Remote authenticated users can, through a UI interaction, read or write arbitrary files and trigger denial-of-service a...
PT-2026-82877
Name of the Vulnerable Software and Affected Versions Synology Chat Server versions prior to 2.4.5-22148 Description An improper neutralization of input during web page generation, known as Cross-site Scripting XSS, occurs in the extract domain component. This allows remote authenticated users,...
PT-2026-83027
CVE ID: CVE-2026-9548 Severity: MEDIUM | CVSS Score: 6.5/10 Severity and score come from CVSS ratings in the National Vulnerability Database NVD, the NIST repository of standardized vulnerability data. An improper neutralization of input during web page generation 'Cross-site Scripting'...
CVE-2026-36228
Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality...