Lucene search
+L

41 matches found

Cvelist
Cvelist
added 2025/01/16 8:8 p.m.23 views

CVE-2025-23760 WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Volkov Chatter allows Stored XSS. This issue affects Chatter: from n/a through 1.0.1...

7.1CVSS0.00403EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:8 p.m.13 views

CVE-2025-23760 WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Volkov Chatter allows Stored XSS. This issue affects Chatter: from n/a through 1.0.1...

7.1CVSS6.8AI score0.00403EPSS
Exploits0References1
CVE
CVE
added 2025/01/16 8:8 p.m.51 views

CVE-2025-23760

CVE-2025-23760 is a Stored XSS vulnerability in the Chatter plugin for WordPress, caused by Improper Neutralization of Input During Web Page Generation. Affected versions are reported as from n/a through 1.0.1. The Red Hat security entry repeats this description and identifies the same CVE ID, co...

7.1CVSS8.6AI score0.00403EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.7 views

WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Mika in WordPress Plugin Chatter versions = 1.0.1...

7.1CVSS6.2AI score0.00403EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.5 views

WordPress plugin Chatter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00403EPSS
Exploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.18 views

CVE-2024-53785

Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1...

4.3CVSS0.0042EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 1:2 p.m.11 views

CVE-2024-53785 WordPress Chatter plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1...

4.3CVSS7AI score0.0042EPSS
Exploits0References1
CVE
CVE
added 2024/12/09 1:2 p.m.56 views

CVE-2024-53785

CVE-2024-53785 : WordPress Chatter plugin

4.3CVSS8.6AI score0.0042EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/09 1:2 p.m.25 views

CVE-2024-53785 WordPress Chatter plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1...

4.3CVSS0.0042EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.7 views

WordPress plugin Chatter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.7AI score0.0042EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/28 4:23 p.m.7 views

WordPress Chatter plugin <= 1.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by muhamad hidayat Patchstack Alliance in WordPress Plugin Chatter versions = 1.0.1...

4.3CVSS7AI score0.0042EPSS
Exploits0Affected Software1
Schneier on Security
Schneier on Security
added 2022/10/05 7:7 p.m.10 views

October Is Cybersecurity Awareness Month

For the past nineteen years, October has been Cybersecurity Awareness Month here in the US, and that event that has always been part advice and part ridicule. I tend to fall on the apathy end of the spectrum; I dont think Ive ever mentioned it before. But the memes can be funny. Heres a decent...

3.7AI score
Exploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/12/22 5:55 p.m.24 views

Audio bugging with the Fisher Price Chatter Bluetooth Telephone

The Fisher Price Chatter Bluetooth Telephone is a reincarnation of a familiar kids toy. It acts as a Bluetooth headset, so the user can connect their smartphone to it and take calls using the kids phone handset. Cute! Unfortunately, little to no consideration has been given to privacy and securit...

6.7AI score
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2021/12/14 9:5 p.m.163 views

Log4Shell Makes Its Appearance in Hacker Chatter: 4 Observations

It's been a long few days as organizations' security teams have worked to map, quantify, and mitigate the immense risk presented by the Log4Shell vulnerability within Log4j. As can be imagined, cybercriminals are working overtime as well, as they seek out ways to exploit this vulnerability. Need...

9.3CVSS0.6AI score0.99999EPSS
Exploits355
CNNVD
CNNVD
added 2021/01/04 12:0 a.m.5 views

Chatter Social Creeper Security Breach

Chatter Social Creeper is a dynamic Python-based interpretive language from the individual developers of Chatter Social. A security vulnerability exists in Creeper version 1.1.3 that stems from binaries containing potentially malicious software...

9.8CVSS7.3AI score0.00858EPSS
Exploits0References2
ThreatPost
ThreatPost
added 2016/11/07 5:10 p.m.22 views

Risk of Election Day Cyberattacks Low According To Cyber Chatter

Security experts monitoring cyber-chatter for virtual and real-world threats against U.S. Election Day targets say so far, so good. They don’t believe there will be cyberattack or al-Qaeda terror attack come Election Day. That’s not to say the U.S. government isn’t ready for the worst. The White...

0.2AI score
Exploits0References4
hackapp
hackapp
added 2016/04/01 8:56 a.m.10 views

Chatter Bot - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Chatter Bot published at the 'play' market has multiple vulnerabilities...

0.6AI score
Exploits0References1Affected Software1
ThreatPost
ThreatPost
added 2014/08/26 3:10 p.m.9 views

Netflix Open Source Security Tools Solve Range of Challenges

Few organizations experience the scale of Web-based application security challenges that Netflix engineers deal with on a regular basis. Sometimes the response to a threat requires a homespun tool that, more often than not, ends up being released to open source. “Our assumption is that we...

Exploits0References2
ThreatPost
ThreatPost
added 2014/04/28 2:21 p.m.11 views

AOL Breached, Investigating Spam from Spoofed Accounts

AOL reported today that it has been breached and urges users of its web-based email and other online services to change their passwords. AOL’s investigation of a breach of its internal network and systems is under way with the help of federal authorities and a forensics firm, the company said. La...

0.8AI score
Exploits0References2
securityvulns
securityvulns
added 2006/09/06 12:0 a.m.33 views

Avira AntiVir antivirus privilege escalation

Privilege escalation with chatter attack...

3.2AI score
Exploits0References1Affected Software1
Rows per page
Query Builder