CVE-2025-7951

CVE-2025-7951 affects code-projects Public Chat Room 1.0. A cross-site scripting vulnerability arises from manipulating the chat_msg/your_name parameter in an unknown part of /send_message.php, with remote initiation possible and the exploit publicly disclosed. Public ENISA/Red Hat and partner fe...

CVE-2025-7951 code-projects Public Chat Room send_message.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0. This affects an unknown part of the file /sendmessage.php. The manipulation of the argument chatmsg/yourname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-7950 code-projects Public Chat Room login.php sql injection

A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-7950 code-projects Public Chat Room login.php sql injection

A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-7950

CVE-2025-7950 affects code-projects Public Chat Room 1.0. The vulnerability exists in the login.php file where manipulating the Username parameter leads to SQL injection. The issue can be exploited remotely and the exploit has been publicly disclosed, indicating potential for unauthorized access ...

CVE-2025-51862

Insecure Direct Object Reference IDOR vulnerability in TelegAI telegai.com thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and...

CVE-2025-51859

Stored Cross-Site Scripting XSS vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model LLM to embed malicious script payloads...

Deepfiction AI 安全漏洞

Deepfiction AI is an artificial intelligence platform from Deepfiction AI. A security vulnerability exists in Deepfiction AI versions 2025-06-03 and earlier that stems from an unsafe direct object reference that could lead to the use of other user credits to chat with LLM...

CVE-2025-51867

CVE-2025-51867 affects Deepfiction AI and is an Insecure Direct Object Reference (IDOR) vulnerability exploiting the /browse/stories endpoint to let an attacker chat with the LLM using other users’ credits. Root cause: improper access controls exposing sensitive information tied to user credits. ...

Code-Projects Public Chat Room 代码注入漏洞

Code-Projects Public Chat Room is Code-Projects open source public chat room software. Code-Projects Public Chat Room version 1.0 suffers from a code injection vulnerability, which originates from a cross-site scripting attack due to incorrect manipulation of the chatmsg/yourname parameter in the...

ChatGPT Unli 跨站脚本漏洞

ChatGPT Unli is an AI assistant platform from ChatGPT Unli, Inc. A security vulnerability exists in ChatGPT Unli versions 2025-05-26 and earlier, which stems from the fact that sending a specially crafted SVG file through the chat interface could lead to the execution of arbitrary code...

CVE-2025-51864

A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...

CVE-2025-51864

Summary: CVE-2025-51864 is a reflected XSS vulnerability in the AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27 that could enable JWT token theft and remote account hijack via crafted input. What is affected: AIBOX LLM chat front-end component used for chat interactions. Root cause / impact:...

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Operator Surname

Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting XSS via Operator Surname Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software Link:...

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username

Exploit Title: LiveHelperChat 4.61 - Stored Cross Site Scripting XSS via Telegram Bot Username Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software Link:...

📄 Discourse 3.1.1 Unauthenticated Chat Message Access

Proof of concept exploit for Discourse version 3.1.1 that provides unauthenticated chat message access. !/usr/bin/env ruby Title : Discourse 3.1.1 - Unauthenticated Chat Message Access CVE-2023-45131 CVSS: 7.5 High Affected: Discourse 3.1.1 stable, 3.2.0.beta2 Author ibrahimsql @...

PT-2025-30374 · Unknown · Code-Projects Public Chat Room

Name of the Vulnerable Software and Affected Versions: code-projects Public Chat Room version 1.0 Description: A critical issue exists in code-projects Public Chat Room 1.0 related to a functionality within the /login.php file. Manipulation of the Username argument results in a SQL injection. The...

Code-Projects Public Chat Room 注入漏洞

Code-Projects Public Chat Room is a Code-Projects open source public chat room software. Code-Projects Public Chat Room version 1.0 suffers from an injection vulnerability that stems from a SQL injection attack due to a misuse of the parameter Username in the file /login.php...

PT-2025-30375 · Unknown · Code-Projects Public Chat Room

Name of the Vulnerable Software and Affected Versions: code-projects Public Chat Room version 1.0 Description: A problematic issue exists in code-projects Public Chat Room 1.0. The issue is related to cross site scripting, triggered by manipulating the chat msg/your name argument within an unknow...

CVE-2025-51864

A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...