7861 matches found
CVE-2016-7553
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...
Glide - Video Chat Messenger - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Glide - Video Chat Messenger published at the 'play' market has multiple vulnerabilities...
BitlBee Denial of Service Vulnerability
BitlBee is an irc server. A denial of service vulnerability exists in BitlBee. An attacker could exploit this vulnerability to cause a denial of service...
[SECURITY] Fedora 24 Update: bitlbee-3.5.1-1.fc24
Bitlbee is an IRC to other chat networks gateway. Bitlbee can be used as an IRC server which forwards everything you say to people on other chat networks like XMPP/Jabber including Google Talk and Hipchat, MSN/Skype, AIM and ICQ, the Twitter microblogging network and all other Twitter API...
[SECURITY] Fedora 25 Update: bitlbee-3.5.1-1.fc25
Bitlbee is an IRC to other chat networks gateway. Bitlbee can be used as an IRC server which forwards everything you say to people on other chat networks like XMPP/Jabber including Google Talk and Hipchat, MSN/Skype, AIM and ICQ, the Twitter microblogging network and all other Twitter API...
Phabricator: User with only Viewing Privilege can send message to Room
Hey, mongoose When the owner of a chat room gives any user Viewing Privilege, that user can then send messages to the room. As expected, there's no form to send messages when the user access the room since in theory it shouldn't be possible. However, messages via POST requests can still be sent a...
Waplog Chat & Free Dating - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Waplog Chat & Free Dating published at the 'play' market has multiple vulnerabilities...
Zendesk: a stored xss in web widget chat
The researcher found a stored XSS vulnerability where an end-user was able to execute arbitrary Javascript against the Zendesk agent via the chat integration. The researcher participated in the Zendesk 2016 holiday promotion and was awarded the Zendesk promotional bounty...
Facebook chat history stealing vulnerability, the impact of the billion Messenger users-vulnerability warning-the black bar safety net
In this article, we describe in detail A in Facebook on find Server security vulnerabilities, this vulnerability might affect millions of CORScross-origin resource sharingin the Origin header to allow“NULL”value of the site, the vulnerability will threat the privacy of the user, the malicious...
[SECURITY] Fedora 24 Update: mcabber-1.0.4-1.fc24
mcabber is a console Jabber instant messaging/chat client with SSL support, MUC Multi-User Chat support, history logging, commands completion, and extern al action triggers...
AVChat Video Chat Integration Kit, File permissions
AVChat Video Chat Integration Kit, File permissions...
YouNow: Live Stream Video Chat - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application YouNow: Live Stream Video Chat published at the 'play' market has multiple vulnerabilities...
Yahoo Messenger - Free chat - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Yahoo Messenger - Free chat published at the 'play' market has multiple vulnerabilities...
Simple keitai chat vulnerable to cross-site scripting
Overview Simple keitai chat provided by LEMON-S PHP contains reflected and stored cross-site scripting vulnerabilities CWE-79. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
JVN#05493467: Simple keitai chat vulnerable to cross-site scripting
Simple keitai chat provided by LEMON-S PHP contains reflected and stored cross-site scripting vulnerabilities CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Simple keitai chat Simple keitai chat is no longer being developed or maintained. It is...
OS X Gather Messages
This module will collect the Messages sqlite3 database files and chat logs from the victim's machine. There are four actions you may choose: DBFILE, READABLE, LATEST, and ALL. DBFILE and READABLE will retrieve all messages, and LATEST will retrieve the last X number of messages useful with 2FA...
GUYZ - Gay Chat & Gay Dating - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application GUYZ - Gay Chat & Gay Dating published at the 'play' market has multiple vulnerabilities...
dev.bib.hs-hannover.de XSS vulnerability
Vulnerable URL: http://dev.bib.hs-hannover.de/chat/patron/ajaxinit.php?jsoncallback=prompt/OPENBUGBOUNTY/...
chat-tst2.coral.co.uk XSS vulnerability
Vulnerable URL: https://chat-tst2.coral.co.uk/chatweb/conf/coraltst2coral/widget?lang=%27/prompt%28%27OPENBUGBOUNTY%27%29/%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
