activeCollab Chat Module Arbitrary PHP Code Execution (CVE-2012-6554)

A code execution vulnerability exists in Chat module for activeCollab.The vulnerability is due to a flaw that is triggered by the pregreplace function.A remote attacker may exploit this vulnerability by evaluating a string with complex curly syntax, allowing for the execution of arbitrary code...

Popular secure chat APP TextSecure presence of“unknown key sharing attack”vulnerability-vulnerability warning-the black bar safety net

! TextSecure is Android platform a encrypted chat APP, this free APP is designed in order to guarantee communication privacy. This APP by Open WhisperSystems developed, the code completelyopen sourcesupport end-to-end SMS encryption. Looks very safe is not? Recently, however, from Germany's Ruhr...

X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution

This module exploits a post-auth vulnerability found in X7 Chat versions 2.0.0 up to 2.0.5.1. The vulnerable code exists on lib/message.php, which uses pregreplace function with the /e modifier. This allows a remote authenticated attacker to execute arbitrary PHP code in the remote machine. Modul...

CVE-2014-5276

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

CVE-2014-5275

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 password, 2 email, or 3 id parameter...

Sql injection

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 password, 2 email, or 3 id parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

CVE-2014-5276

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

CVE-2014-5276

CVE-2014-5276 describes multiple XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0. The issue allows remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php. Affected software: Pro Chat Rooms T...

CVE-2014-5275

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 password, 2 email, or 3 id parameter...

CVE-2014-5275

CVE-2014-5275 affects Pro Chat Rooms Text Chat Rooms 8.2.0; SQL injection vulnerabilities exist in includes/functions.php, exploitable via (1) password, (2) email, or (3) id parameters. The underlying cause is improper input handling that allows unauthenticated/injected SQL execution; however, th...

CVE-2014-5276: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

PT-2014-6388

Name of the Vulnerable Software and Affected Versions Pro Chat Rooms Text Chat Rooms version 8.2.0 Description The issue allows remote authenticated users to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This can be achieved via two methods: 1 uploading ...

PT-2014-6387

Name of the Vulnerable Software and Affected Versions Pro Chat Rooms Text Chat Rooms version 8.2.0 Description The issue concerns SQL injection vulnerabilities in the includes/functions.php file. Remote authenticated users can execute arbitrary SQL commands by manipulating the password, email, or...

CVE-2014-5275: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 password, 2 email, or 3 id parameter...

Information disclosure

The MedQuiz: Medical Chat and MCQs aka com.pdevsmedd.med application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6713

Summary : The MedQuiz: Medical Chat and MCQs (com.pdevsmedd.med) Android app, version 1.5, does not verify X.509 certificates for SSL servers. This allows MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. Documented impacts include partial confidentia...

PT-2014-7391

Name of the Vulnerable Software and Affected Versions The MedQuiz: Medical Chat and MCQs aka com.pdevsmedd.med version 1.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify...

CVE-2014-6713: Undefined Security Weakness

The MedQuiz: Medical Chat and MCQs aka com.pdevsmedd.med application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6690

Affected software: InstaMessage – Instagram Chat (aka com.futurebits.instamessage.free), version 1.6.2 for Android. Root cause: the app does not verify X.509 certificates from SSL servers. Impact: MITM attackers could spoof legitimate servers and obtain sensitive information via a crafted certifi...