Lucene search
+L

12297 matches found

attackerkb
attackerkb
•added 2020/10/15 3:15 a.m.•11 views

CVE-2020-5642

Cross-site request forgery CSRF vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.8CVSS6.3AI score0.00818EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2020/10/15 2:20 a.m.•92 views

CVE-2020-5642

The CVE-2020-5642 entry concerns the WordPress plugin Live Chat - Live support (versions 3.1.0 and earlier). The vulnerability is a Cross-Site Request Forgery (CSRF) that can allow remote attackers to hijack administrator authentication via unspecified vectors, potentially enabling unintended ope...

8.8CVSS8.8AI score0.00818EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2020/10/15 2:20 a.m.•41 views

CVE-2020-5642

Cross-site request forgery CSRF vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.9AI score0.00818EPSS
SaveExploits0References3
Mend
Mend
•added 2020/10/15 2:20 a.m.•4 views

CVE-2020-5642

Cross-site request forgery CSRF vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.8CVSS0.00818EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/10/15 12:00 a.m.•4 views

PT-2020-18609

Name of the Vulnerable Software and Affected Versions Live Chat - Live support versions 3.1.0 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. This can lead to unauthorized access and...

8.8CVSS0.00818EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/15 12:00 a.m.•6 views

CVE-2020-5642: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

8.8CVSS5.9AI score0.00818EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2020/10/14 11:05 a.m.•11 views

live-portal.de Cross Site Scripting vulnerability OBB-1407834

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/10/14 6:32 a.m.•13 views

WordPress Plugin "Live Chat - Live support" vulnerable to cross-site request forgery

Overview WordPress Plugin "Live Chat - Live support" provided by onWebChat contains a cross-site request forgery vulnerability CWE-352. Yusuke Fukuda of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University reported this vulnerability to the...

8.8CVSS6.5AI score0.00818EPSS
SaveExploits0References6
WPVulnDB
WPVulnDB
•added 2020/10/14 12:00 a.m.•13 views

Live Chat - Live support < 3.2.0 - Cross-Site Request Forgery

The plugin was affected by a Cross-Site Request Forgery issue, which may allow attackers to change some of the settings. It also appears that some Authenticated Cross-Site Scripting issues have been fixed, which could be used along with the CSRF to perform Stored XSS attacks...

6.8CVSS4.2AI score0.00818EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2020/10/14 12:00 a.m.•32 views

WordPress Live Chat - Live support plugin <= 3.1.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Yusuke Fukuda Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University in WordPress Live Chat - Live support plugin versions = 3.1.0. Solution Update the WordPress Live Chat - Live support plugi...

8.8CVSS2.9AI score0.00818EPSS
SaveExploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/10/14 12:00 a.m.•56 views

JVN#92404841: WordPress Plugin "Live Chat – Live support" vulnerable to cross-site request forgery

WordPress Plugin "Live Chat - Live support" provided by onWebChat contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious web page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the...

8.8CVSS8.6AI score0.00818EPSS
SaveExploits0
Akamai Blog
Akamai Blog
•added 2020/10/13 10:00 p.m.•51 views

Akamai and Snyk Partnership Creates a Powerful Combination for In-Browser Script Protection

A web experience begins with the sum of the code you created. But it also includes all the code the user is put in contact with when loading your website. This means the attack surface to monitor for web application software threats is not just your code repositories, but the sum of the assets re...

1.1AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2020/10/12 10:00 p.m.•55 views

Making the Edge Come Alive

In April 2019, Netflix viewers streamed 164 million hours of on-demand content per day. Fast forward a year. In April 2020, Twitch streamed 55 million hours per day. The vast majority of that was live. We have seen the future of video. It is live. But live workflows have challenges and requiremen...

6.9AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2020/10/12 10:00 p.m.•50 views

Media Services Live Features Upgrades to Support Modern-Day Live-Streaming Needs

Media Services Live MSL is Akamai's flagship solution for preparing live streams to provide broadcast-grade streaming quality for our live-streaming customers. MSL provides purpose-built key capabilities with liveOrigin, including ingest acceleration to map encoders to optimal entry points on the...

0.9AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2020/10/12 10:00 p.m.•62 views

Preparing the Edge for a Big Year in Live Streaming

Next year is shaping up to be a big one for live streaming. Typically characteristic of even years, when many major international sporting events take place, 2021 looks like it could defy the trend. Akamai is predicting an unprecedented surge in live streaming that will start in late 2020 and...

6.7AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2020/10/12 4:00 a.m.•22 views

Preparing the Edge for a Big Year in Live Streaming

Next year is shaping up to be a big one for live streaming. Typically characteristic of even years, when many major international sporting events take place, 2021 looks like it could defy the trend. Akamai is predicting an unprecedented surge in live streaming that will start in late 2020 and...

0.7AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
•added 2020/10/08 6:19 p.m.•54 views

How InsightVM Helps You Save Time and Prove Value

For many security teams, vulnerability risk management can feel like an endless climb. The truth is, no IT environment will ever be fully free of cyber-risk. That said, there are simple, attainable steps you can take right away to achieve an acceptable level of risk for your organization with the...

0.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/10/07 8:05 a.m.•13 views

cgi.live-net.jp Cross Site Scripting vulnerability OBB-1386821

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
osv_cve
osv_cve
•added 2020/10/02 9:15 a.m.•31 views

CVE-2020-26135

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...

6.1CVSS6AI score
SaveExploits0References4
NVD
NVD
•added 2020/10/02 9:15 a.m.•23 views

CVE-2020-26135

Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATHINFO...

6.1CVSS0.01041EPSS
SaveExploits0References4
Rows per page
Query Builder