Slack Chat Detection - UDP #1

Binary data 9604.prm...

Slack Chat Detection via UDP

Binary data 9606.prm...

Irssi 'buf.pl' Local Information Disclosure Vulnerability

Irssi is a text-based IRC client program written in C by Timo Sirainen and released under the GPL GNU General Public License. A local information disclosure vulnerability exists in Irssi, which can be exploited by a local attacker to obtain sensitive information...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

HipChat - Chat Built for Teams - BSD license, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application HipChat - Chat Built for Teams published at the 'play' market has multiple vulnerabilities...

WordPress WP Live Chat Support Plugin 6.2.03 - XSS

WP Live Chat Support Plugin 6.2.03 is prone to a Cross-site scripting XSS vulnerability. This vulnerability allows to perform a number of arbitrary actions via wp-live-chat-support/functions.php line 1233. Solution Update the plugin. This vulnerability was fixed in 6.2.04...

WordPress Chat Plugin <= 1.0.8 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "message" parameter. Solution Update the plugin...

Cross site scripting

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4851

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4851: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-6178

Name of the Vulnerable Software and Affected Versions Let's PHP! simple chat versions prior to 2016-08-15 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For versions...

CVE-2016-5050

Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file...

CVE-2016-5049

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter...

CVE-2016-5048

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

CVE-2016-5048

CVE-2016-5048 affects ReadyDesk 9.1 and targets the chat/staff/default.aspx login input. The user name field is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is described in multiple sources (NVD entry and CERT/CC advisory) with a high...

CVE-2016-5050

CVE-2016-5050 is an uncontrolled/ unrestricted file upload vulnerability within ReadyDesk 9.1, exploitable via chat/sendfile.aspx to upload a .aspx file and execute arbitrary code. The NVD entry documents an attack path that requires no authentication and network access, with a high severity (CVS...

PT-2016-6229

Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description The issue allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file due to an unrestricted file upload vulnerability in the chat/sendfile.aspx endpoint. Recommendations For...

PT-2016-6227

Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the user name field in the chat/staff/default.aspx page. Recommendations For ReadyDesk version 9.1, consider restricting acce...

PT-2016-6228

Name of the Vulnerable Software and Affected Versions ReadyDesk version 9.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter in the...