CVE-2018-9864

The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field...

CVE-2018-9864

CVE-2018-9864 affects the WP Live Chat Support plugin for WordPress (older than 8.0.06). The vulnerability is a stored XSS in the Name field (wplc_name) that could be triggered via wp_json/wp_live_chat_support/v1/start_chat when initiating a chat. Public records show CVSS2 base 4.3 (MEDIUM) and C...

WP Live Chat Support < 8.0.06 - Unauthenticated Stored XSS

An unauthenticated user can inject arbitrary javascript code in the admin panel by using the text field "Name" of WP Live Chat Support. The arbitrary code runs on the page wplivechat-menu-history. In the file wp-live-chat-support.php there is no sanitization of $result-id row 4439. WP Live Chat...

WordPress WP Live Chat Support plugin <=8.0.05 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability found by Luigi in WordPress WP Live Chat Support plugin versions =8.0.05. Solution Update the WordPress WP Live Chat Support plugin to the latest available version at least 8.0.06...

WP Live Chat Support 8.0.05 Cross Site Scripting

An unauthenticated user can inject arbitrary javascript code in the admin panel by using the text field aNamea of WP Live Chat Support. The arbitrary code runs on the page wplivechat-menu-history. In the file wp-live-chat-support.php there is no sanitization of $result-id row 4439. WP Live Chat...

PT-2018-19084 · WordPress · Wp Live Chat Support

Name of the Vulnerable Software and Affected Versions: WP Live Chat Support plugin versions prior to 8.0.06 Description: The issue is related to stored XSS via the Name field. Recommendations: For versions prior to 8.0.06, update to version 8.0.06 or later to resolve the issue...

Mainstream Live Chat widgets leaking personal details of employees

By Waqas According to the findings of Project Insecurity researchers Cody Zacharias This is a post from HackRead.com Read the original post: Mainstream Live Chat widgets leaking personal details of employees...

GRR Rapid Response - Remote Live Forensics For Incident Response

GRR Rapid Response is an incident response framework focused on remote live forensics. The goal of GRR is to support forensics and investigations in a fast, scalable manner to allow analysts to quickly triage attacks and perform analysis remotely. GRR consists of 2 parts: client and server. GRR...

[SECURITY] Fedora 28 Update: python-notebook-5.4.0-2.fc28

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

[SECURITY] Fedora 28 Update: kst-2.0.8-20.fc28

Kst is a real-time data viewing and plotting tool with basic data analysis functionality. Kst contains many powerful built-in features and is expandable with plugins and extensions. Main features of kst include: Robust plotting of live "streaming" data. Powerful keyboard and mouse plot...

[SECURITY] Fedora 27 Update: python-notebook-5.2.1-2.fc27

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

[SECURITY] Fedora 26 Update: python-notebook-5.0.0-2.fc26

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

CoverCMS Cross-Site Scripting Vulnerability

CoverCMS is a content management system CMS. The system features multi-content distribution, scalability and multi-content type support. A cross-site scripting vulnerability exists in CoverCMS version 1.1.6. A remote attacker can exploit this vulnerability to obtain cookies from live users of the...

Talos Threat Research Summit at Cisco Live US 2018

Cisco Talos presents a conference by Defenders, for Defenders. Talos had one goal in mind when creating a brand new conference: Make something that we'd want to attend ourselves. As such, the Talos Threat Research Summit is aimed at being a one-day conference by defenders, for defenders. This...

CVE-2014-2297

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...

CVE-2014-2297

CVE-2014-2297 concerns multiple Cross-Site Scripting (XSS) vulnerabilities in the WordPress plugin VideoWhisper Live Streaming Integration (version 4.29.6 mentioned in the CVE description). Attackers can inject arbitrary script/HTML by manipulating the n parameter to ls/htmlchat.php or the bgcolo...

Product update: Virtuozzo 7.0 Update 7 (7.0.7-423)

The Update 7 for Virtuozzo 7.0 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-79872 Enabling nested virtualization for VM could fail due to a bug in libvirt. Vulnerability id: PSBM-81107 Setting IP address to a VM without guest tools returned error even...

live-timing.com XSS vulnerability

Open Bug Bounty ID: OBB-580026 Description| Value ---|--- Affected Website:| live-timing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

live-dota.ru XSS vulnerability

Open Bug Bounty ID: OBB-579258 Description| Value ---|--- Affected Website:| live-dota.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Solaris 10 (sparc) : 121428-15

SunOS 5.10: Live Upgrade Zones Support Patch. Date this patch was last updated by Sun : Apr/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...