PT-2015-7141

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager version 9.02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted chat message. Recommendations For Cisco Unified Web and...

WordPress WP Symposium Plugin 15.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin wp-symposium Unauthenticated SQL Injection Vulnerability Date: 2015-07-30 Exploit Author: PizzaHatHacker Vendor Homepage: http://www.wpsymposium.com/ Version: ? = version = 15.5.1 Tested on: Apache / WordPress...

Shopify: Reflected XSS in chat.

hello login in the chat and upload file with Payload name code injection like the code html will execute You are not allowed to upload '' files, allowed types: jpg, jpeg, gif, png Hadji Samir...

The vulnerability of the Moodle learning management system allows a hacker to alter the settings of the chat ban.

The vulnerability of the message/externallib.php component of the Moodle learning management system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to alter the settings for chat messages by using...

WhatsApp Could Offer 'Like' and 'Mark as Unread' Features Soon

The popular instant messaging app WhatsApp might adopt some features from its parent company, Facebook. The messaging giant is testing some new features that might be coming to the app soon. The features include a 'Like' button similar to that of Facebook and a 'Mark as Unread' feature for chat...

WP Live Chat Support < 4.4.0 - Unauthenticated Blind SQL Injection

The 3CX Live Chat WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability...

WordPress Live Chat Support Plugin <= 4.3.5 - Unauthenticated Blind SQL Injection

Because of this vulnerability, unauthenticated remote attackers can execute arbitrary SQL commands. Solution Update the plugin...

Shopify: Reflected XSS in chat

https://livechat.shopify.com/customer/chats/new?chat%5Bemail%5D=mymail%40mail.com&chat%5Bname%5D=My+Name&utmsource=partner&chat%5Btags%5D=123%27%5D%29;alert%281%29;//&chat%5Bmetadata%5D%5Bshopid%5D=90909090%22 Vulnerable param is chattags. If fill it with 123';alert1;// the XSS fill fire after...

Boomchat 4.2 Shell Upload

| Title : boomchat-v4.2 Upload Vulnerability | Author : indoushka | email : [email protected] | Dork : no 4 noob | Tested on: Win8 fr pro | Bug : Upload | Download : www.20script.ir ======================================= 1- register in script 4 chat 2- change photo of profil 3- chang evil...

Pure Faction game server buffer overflow

Buffer overflow via game chat...

Moodle 2.0.x < 2.0.5 / 2.1.x < 2.1.2 Multiple Vulnerabilities

Binary data 8713.prm...

Quassel Denial of Service Vulnerability

Quassel aka Quassel IRC is a cross-platform distributed IRC chat client developed by the Quassel IRC team , which is developed using the QT application framework , PostgreSQL database to store data . A denial of service vulnerability exists in the message splitting feature of Quassel versions pri...

Softwebs Nepal Fast Chat 'loginprg.asp' Cross-Site Scripting Vulnerability

Softwebs Nepal Fast Chat is a chat software package developed by Softwebs Nepal team. A cross-site scripting vulnerability exists in Softwebs Nepal Fast Chat, which arises from the program's failure to adequately filter user-submitted input. When a user browses the affected site, their browser wi...

Voodoo Chat index.php file_path Parameter PHP Code Execution - Ver2 (CVE-2006-3991)

A code execution vulnerability has been reported in Voc-project Voodoo Chat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Et-Chat 3.0.6 Cross Site Scripting

Exploit Title: Et-Chat 3.0.6 Cross Site Scripting Vulnerability Google Dork: "ET-Chat v3.0.6" Date: 2015-03-20 Exploit Author: IranHack Security Team Tested on: Windows 7 Vendor : Www.Et-chat.Ir Our Website : Www.IranHack.Org Vulnerable code : Location :...

WordPress Acobot Live Chat & Contact Form Plugin <= 2.0 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that change plugin settings or conduct cross-site scripting attacks. Solution Upgrade the plugin...

CVE-2015-2039: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Acobot Live Chat & Contact Form plugin 2.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings or 2 conduct cross-site scripting XSS attacks via the acobottok...

PT-2015-5560

Name of the Vulnerable Software and Affected Versions Acobot Live Chat & Contact Form plugin version 2.0 Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct cross-site scripting XSS attacks...

WordPress Acobot Live Chat And Contact Form 2.0 CSRF / XSS

Title: WordPress 'Acobot Live Chat & Contact Form' CSRF/XSS Version: 2.0 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/acobot/ Contacted WordPress: 2015/01/26 ========================================================== Plugin descriptio...

Telegram Messenger Offers Large File Sharing up to 1.5GB while you Chat

In spite of all the things smartphones can do, messaging remains one of the most popular activities. Popular messaging apps like WhatsApp, Viber, WeChat support text messages, voice calls, photo & video sharing features, but there is no provision for sharing every file types on these amazing...