Lucene search
+L

7863 matches found

ThreatPost
ThreatPost
added 2018/04/09 2:33 p.m.19 views

Impact Of Chat Service Breach Expands To Best Buy, Kmart

The number of companies coming forward as victims of a data breach – that potentially exposed hundreds of thousands of credit card payment information – has expanded to include Best Buy and Kmart. Last week, software service provider 247.ai, a company that provides online chat services for Delta,...

0.7AI score
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2018/04/09 12:0 a.m.29 views

WP Live Chat Support < 8.0.06 - Unauthenticated Stored XSS

An unauthenticated user can inject arbitrary javascript code in the admin panel by using the text field "Name" of WP Live Chat Support. The arbitrary code runs on the page wplivechat-menu-history. In the file wp-live-chat-support.php there is no sanitization of $result-id row 4439. WP Live Chat...

4.3CVSS6.6AI score0.0137EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2018/04/09 12:0 a.m.11 views

WordPress WP Live Chat Support plugin <=8.0.05 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability found by Luigi in WordPress WP Live Chat Support plugin versions =8.0.05. Solution Update the WordPress WP Live Chat Support plugin to the latest available version at least 8.0.06...

2.6AI score
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2018/04/09 12:0 a.m.20 views

WP Live Chat Support 8.0.05 Cross Site Scripting

An unauthenticated user can inject arbitrary javascript code in the admin panel by using the text field aNamea of WP Live Chat Support. The arbitrary code runs on the page wplivechat-menu-history. In the file wp-live-chat-support.php there is no sanitization of $result-id row 4439. WP Live Chat...

7.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2018/04/09 12:0 a.m.8 views

PT-2018-19084 · WordPress · Wp Live Chat Support

Name of the Vulnerable Software and Affected Versions: WP Live Chat Support plugin versions prior to 8.0.06 Description: The issue is related to stored XSS via the Name field. Recommendations: For versions prior to 8.0.06, update to version 8.0.06 or later to resolve the issue...

6.1CVSS5.8AI score0.0137EPSS
SaveExploits1References5
ThreatPost
ThreatPost
added 2018/04/05 10:48 p.m.7 views

Delta, Sears Breaches Blamed on Malware Attack Against a Third-Party Chat Service

Security researchers are pinning a recent data breach – that potentially exposed the credit card information of hundreds of thousands of Delta Air Lines and Sears Holdings customers – on weak third-party security policies. The cyberattack hit software service provider 247.ai, a company that...

SaveExploits0References6
HackRead
HackRead
added 2018/04/04 2:32 p.m.45 views

Mainstream Live Chat widgets leaking personal details of employees

By Waqas According to the findings of Project Insecurity researchers Cody Zacharias This is a post from HackRead.com Read the original post: Mainstream Live Chat widgets leaking personal details of employees...

6.9AI score
SaveExploits0
NVD
NVD
added 2018/04/03 10:29 p.m.30 views

CVE-2018-9240

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur...

7.5CVSS7.3AI score0.01881EPSS
SaveExploits0References3
OSV
OSV
added 2018/04/03 10:29 p.m.5 views

DEBIAN-CVE-2018-9240

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur...

7.5CVSS7.3AI score0.01881EPSS
SaveExploits0References1
OSV
OSV
added 2018/04/03 10:29 p.m.17 views

CVE-2018-9240

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur...

7.5CVSS7.6AI score
SaveExploits0References3
Prion
Prion
added 2018/04/03 10:29 p.m.22 views

Null pointer dereference

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur...

5CVSS7.3AI score0.01881EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2018/04/03 10:29 p.m.5 views

UBUNTU-CVE-2018-9240

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur...

7.5CVSS7.1AI score0.01881EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2018/04/03 10:0 p.m.45 views

CVE-2018-9240

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur...

7.5CVSS7.3AI score0.01881EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2018/04/03 12:0 a.m.6 views

PT-2018-18924 · Music Player Daemon +2 · Ncmpc +2

Name of the Vulnerable Software and Affected Versions: ncmpc versions prior to 0.30 Description: The issue is related to a NULL pointer dereference flaw. If a user is using the chat screen and another client sends a long chat message, it could cause a crash and denial of service. Recommendations:...

7.5CVSS7.2AI score0.01881EPSS
SaveExploits0References18
zdt
zdt
added 2018/03/20 12:0 a.m.62 views

Easy Chat Server 3.1 Buffer Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Easy Chat Server 3.1 Remote Exploit Written by r00tpgp @ http://www.r00tpgp.com Usage: python easychat-exploit.py Spawns reverse meterpreter LHOST=192.168.0.162 LPORT=1990 CVE: CVE-2004-2466 Installer: http://www.echatserver.com/...

5CVSS6.5AI score0.74696EPSS
SaveExploits11
Packet Storm
Packet Storm
added 2018/03/17 12:0 a.m.45 views

Easy Chat Server 3.1 Buffer Overflow

!/usr/bin/python Easy Chat Server 3.1 Remote Exploit Written by r00tpgp @ http://www.r00tpgp.com Usage: python easychat-exploit.py Spawns reverse meterpreter LHOST=192.168.0.162 LPORT=1990 CVE: CVE-2004-2466 Installer: http://www.echatserver.com/ Tested on Windows 7 32b SP1 import sys, socket, ti...

5CVSS6.5AI score0.74696EPSS
SaveExploits11
zdt
zdt
added 2018/02/21 12:0 a.m.37 views

EChat Server 3.1 - CHAT.ghp Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Author: Juan Sacco Vulnerability found using Exploit Pack v10 - http://exploitpack.com Impact: An attacker could exploit this vulnerability to execute arbitrary code in the context of the application. Failed exploit attempts will...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/02/21 12:0 a.m.40 views

EChat Server 3.1 - 'CHAT.ghp' Buffer Overflow

Exploit Author: Juan Sacco Vulnerability found using Exploit Pack v10 - http://exploitpack.com Impact: An attacker could exploit this vulnerability to execute arbitrary code in the context of the application. Failed exploit attempts will result in adenial-of-service condition. Program description...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2018/02/21 12:0 a.m.27 views

EChat Server 3.1 - CHAT.ghp Buffer Overflow

EChat Server 3.1 - CHAT.ghp Buffer Overflow Exploit Author: Juan Sacco Vulnerability found using Exploit Pack v10 - http://exploitpack.com Impact: An attacker could exploit this vulnerability to execute arbitrary code in the context of the application. Failed exploit attempts will result in...

0.7AI score
SaveExploits0
Hacker One
Hacker One
added 2018/01/29 10:50 p.m.25 views

ok.ru: Хранимая XSS в личных сообщениях новое место

Stored XSS in chat title at https://ok.ru/messages...

6AI score
SaveExploits0
Rows per page
Query Builder