7863 matches found
Design/Logic Flaw
IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. IBM X-Force ID: 111928...
CVE-2016-0358
IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. IBM X-Force ID: 111928...
CVE-2016-0358
IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. IBM X-Force ID: 111928...
Live Helper Chat Cross-Site Scripting Vulnerability
Live Helper Chat is a cross-platform online chat program. A cross-site scripting vulnerability exists in the HTTP packet header processing in Live Helper Chat 2.06v and prior versions. A remote attacker can exploit this vulnerability to execute arbitrary Javascript code within another user's...
Smart Chat 1.0.0 - SQL Injection
Exploit Title: Smart Chat - PHP Script 1.0.0 - Authentication Bypass Dork: N/A Date: 28.08.2017 Vendor Homepage: http://codesgit.com/ Software Link: https://www.codester.com/items/997/smart-chat-php-script Demo: http://demos.codesgit.com/smartchat/ Version: 1.0.0 Category: Webapps Tested on:...
Smart Chat 1.0.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Smart Chat - PHP Script 1.0.0 - Authentication Bypass Dork: N/A Date: 28.08.2017 Vendor Homepage: http://codesgit.com/ Software Link: https://www.codester.com/items/997/smart-chat-php-script Demo:...
Smart Chat 1.0.0 - SQL Injection
Smart Chat 1.0.0 - SQL Injection Exploit Title: Smart Chat - PHP Script 1.0.0 - Authentication Bypass Dork: N/A Date: 28.08.2017 Vendor Homepage: http://codesgit.com/ Software Link: https://www.codester.com/items/997/smart-chat-php-script Demo: http://demos.codesgit.com/smartchat/ Version: 1.0.0...
Synology Chat Server-Side Request Forgery Vulnerability
Synology Chat is a live chat tool from Synology. link preview is one of the link preview components. A server-side request forgery vulnerability exists in link preview in Synology Chat versions prior to 1.1.0-0806. A remote attacker can exploit this vulnerability to gain access to internal...
CVE-2017-11148
Server-side request forgery SSRF vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors...
Server side request forgery (ssrf)
Server-side request forgery SSRF vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors...
CVE-2017-11148
Server-side request forgery SSRF vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors...
CVE-2017-11148
Synology Chat contains a Server-Side Request Forgery (SSRF) in the link preview component that affects versions prior to 1.1.0-0806. Remote authenticated users can access intranet resources via unspecified vectors. The CNVD/NVD entries confirm the vulnerability in Synology Chat and warn about the...
CVE-2017-11148
Server-side request forgery SSRF vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Hackers Leverage Chat for Command&Control: How You Can Protect Your Business
Chat platforms have become a cornerstone for businesses and their customers alike. These important tools make it possible for employees to communicate and collaborate from nearly any location, and enable consumers to reach out to companies in accordance with their preferences. This fondness for...
Candy Chat Cross-Site Scripting Vulnerability
Candy Chat is an open source multi-user chat software based on the XMPP protocol. A cross-site scripting vulnerability exists in Candy Chat. A remote attacker can exploit this vulnerability to execute code on a page via message senders...
Rocket.Chat Cross-Site Scripting Vulnerability
Rocket.Chat is an open source built in JavaScript using the Meteor fullstack framework developed by the Web chat server . A cross-site scripting vulnerability exists in the markdown link parsing code used for messages in Rocket.Chat. A remote attacker can exploit this vulnerability to inject...
WordPress WP Live Chat Support plugin <=7.1.04 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability discovered by Omaid Faizyar in WordPress WP Live Chat Support plugin version 7.1.0.4 and earlier versions. The vulnerability allows an attacker to send Cross-Site Scripting XSS payloads by chat. Solution Update the WordPress WP Live Chat Support plugin to th...
