CVE-2016-5049: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter...

CVE-2016-5050: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file...

CVE-2016-5048: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

Simple Chat Cross-Site Scripting Vulnerability

Simple Chat is a PHP and MySQL based Web chat program . A cross-site scripting vulnerability exists in versions of Simple Chat prior to 2016/08/15. An attacker can exploit this vulnerability to execute arbitrary script code...

simple chat vulnerable to cross-site scripting

Overview simple chat provided by Let's PHP! contains a cross-site scripting vulnerability CWE-79. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary...

JVN#42262137: simple chat vulnerable to cross-site scripting

simple chat provided by Let's PHP! contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products Affected simple...

Omegle, the Popular 'Chat with Strangers' Service Leaks Your Dirty Chats and Personal Info

Ever since the creation of online chat rooms and then social networking, people have changed the way they interact with their friends and associates. However, when it comes to anonymous chatting services, you don't even know what kinds of individuals you are dealing with. Sharing identifiable...

Scorp - Video Chat Rooms - Customized SSL, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Scorp - Video Chat Rooms published at the 'play' market has multiple vulnerabilities...

WordPress WP Live Chat Support(6.2.03) plugin stored XSS

No description provided by source. !/usr/bin/python -- coding: utf-8 -- from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from pocsuite.api.utils import randomStr import urllib import re class TestPOCPOCBase: name = 'WordPress WP Live Chat...

WordPress Plugin WP Live Chat Support Stored Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. WordPress plugin WP Live Chat Support has a stored cross-site scripting vulnerability that can be exploited by an attacker to log in as a WordPress user and perform...

Secure chat software Telegram will reveal in which the Copy-Paste of the text-vulnerability warning-the black bar safety net

! Security researcher Kirill Firsov found,currently more popular chat app Telegram the occurrence of a data breach. In OS X versions, the application will take the user to copy and paste the text is written to the/var/log/system. log filethe file is also known as syslog ,and thus the private...

World Of Warcraft recruitment: a command line can hijack your game with the hijacking code and video-bug warning-the black bar safety net

! Recently there has been a relates to the social worker, the technology, the new game attack of the Scam, the attacker uses the world of Warcraft World of Warcraft, WoW game plug-in a hidden function. New attacks Imagine this Scene: the game one looks like a well-known Guild members of a role,...

WordPress WP Live Chat Support 6.2.03 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Stored Cross-Site Scripting vulnerability in WP Live Chat Support WordPress Plugin Abstract A stored Cross-Site Scripting vulnerability was found in the WP Live Chat Support WordPress Plugin. This issue can be exploited by an unauthenticated...

WP Live Chat Support < 6.2.04 - Stored Cross-Site Scripting (XSS)

The 3CX Live Chat WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

WordPress Live Chat Support Plugin <= 6.2.03 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Moodle 2.4.x < 2.4.5 / 2.5.x < 2.5.1 Multiple Vulnerabilities

Binary data 9417.prm...

Moodle 2.6.x < 2.6.2 Multiple Vulnerabilities

Binary data 9424.prm...

Moodle 2.5.x < 2.5.5 Multiple Vulnerabilities

Binary data 9423.prm...

WordPress Live Chat Support Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. An HTML injection vulnerability exists in versions of the WordPress Live Chat Support plugin prior to 6.2.02, which can be exploited by an attacker to run arbitrary...

WordPress WP Live Chat Support Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress WP Live Chat Support Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...