Lucene search
+L

2439 matches found

Circl
Circl
•added 2024/02/13 6:06 p.m.•15 views

CVE-2019-2209

creationtimestamp| type| source ---|---|--- 2024-02-13 18:06:31+00:00| seen| https://t.me/ctinow/183997...

5.5CVSS5.5AI score0.00148EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
•added 2024/02/06 4:53 p.m.•35 views

WhatsApp Chats Will Soon Work With Other Encrypted Messaging Apps

New EU rules mean WhatsApp and Messenger must be interoperable with other chat apps. Here’s how that will work...

7.3AI score
SaveExploits0
Prion
Prion
•added 2023/12/29 11:15 a.m.•33 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...

4.3CVSS7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/29 10:58 a.m.•41 views

CVE-2023-51371 WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...

5.9CVSS5.9AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/29 10:58 a.m.•79 views

CVE-2023-51371

The CVE-2023-51371 entry concerns the WordPress Bit Assist Plugin (

5.9CVSS5.1AI score0.00328EPSS
SaveExploits0References1Affected Software1
Schneier on Security
Schneier on Security
•added 2023/12/11 12:10 p.m.•13 views

Facebook Enables Messenger End-to-End Encryption by Default

Its happened. Details here, and tech details here for messages in transit and here for messages in storage Rollout to everyone will take months, but its a good day for both privacy and security. Slashdot thread...

7.3AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
•added 2023/12/07 4:38 p.m.•19 views

End-to-End Encrypted Instagram and Messenger Chats: Why It Took Meta 7 Years

Mark Zuckerberg personally promised that the privacy feature would launch by default on Messenger and Instagram chat. WIRED goes behind the scenes of the company’s colossal effort to get it right...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/12/07 5:52 a.m.•36 views

Meta Launches Default End-to-End Encryption for Chats and Calls on Messenger

Meta has officially begun to roll out support for end-to-end encryption E2EE in Messenger for personal calls and one-to-one personal messages by default in what it called the "most significant milestone yet." "This isn't a routine security update: we rebuilt the app from the ground up, in close...

7.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/11/22 12:00 a.m.•18 views

WordPress Plugin Chaty Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Floating Chat Widget:...

5.9CVSS6.3AI score0.00398EPSS
SaveExploits0References2
Circl
Circl
•added 2023/11/06 10:25 p.m.•15 views

CVE-2023-5719

creationtimestamp| type| source ---|---|--- 2023-11-06 22:25:54+00:00| seen| https://t.me/cibsecurity/73630...

9.8CVSS8.7AI score0.00514EPSS
SaveExploits0References1
Circl
Circl
•added 2023/10/26 6:16 p.m.•11 views

CVE-2023-5785

creationtimestamp| type| source ---|---|--- 2023-10-26 18:16:04+00:00| seen| https://t.me/cibsecurity/72972...

7.5CVSS5.9AI score0.00551EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2023/10/26 12:00 a.m.•25 views

WordPress NinjaTeam Live Chat (Messenger API) Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software NinjaTeam Live Chat Messenger API Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5740 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 05ea165d1ff8 Credits Lana Codes...

6.4CVSS5.7AI score0.00527EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/10/25 6:17 p.m.•13 views

CVE-2023-5740

The Live Chat with Facebook Messenger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'messenger' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

5.4CVSS6.7AI score0.00527EPSS
SaveExploits0References3
NVD
NVD
•added 2023/10/25 6:17 p.m.•23 views

CVE-2023-5740

The Live Chat with Facebook Messenger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'messenger' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS5.7AI score0.00527EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/25 12:00 a.m.•11 views

WordPress Plugin Live Chat with Facebook Messenger Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS5.9AI score0.00527EPSS
SaveExploits0References4
CVE
CVE
•added 2023/10/24 1:53 p.m.•68 views

CVE-2023-5740

CVE-2023-5740 corresponds to a Stored XSS in the WordPress Live Chat with Facebook Messenger plugin. The vulnerability affects all versions up to 1.0 and arises from insufficient input sanitization and output escaping of shortcode attributes in the messenger shortcode. Exploitation requires attac...

6.4CVSS5.2AI score0.00527EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/24 12:00 a.m.•14 views

PT-2023-32294 · WordPress · Live Chat With Facebook Messenger

Name of the Vulnerable Software and Affected Versions: Live Chat with Facebook Messenger plugin for WordPress versions up to, and including, 1.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'messenger' shortcode due to insufficient input sanitization and outpu...

6.4CVSS5.6AI score0.00527EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2023/10/05 12:00 a.m.•11 views

The vulnerability of the Ceph storage system driver (net/ceph/messenger_v2.c) in Linux operating systems allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability in the Ceph storage system driver net/ceph/messengerv2.c of Linux operating systems arises from the operation of pushing data out of the buffer into memory when processing segment length with the parameter cephdecode32. Exploiting this vulnerability allows a remote attacker to...

9CVSS7.4AI score0.45301EPSS
SaveExploits1References11Affected Software3
Microsoft CVE
Microsoft CVE
•added 2023/10/03 7:00 a.m.•9 views

An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.

...

8.8CVSS7AI score0.45301EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/10/03 2:01 a.m.•10 views

SUSE CVE-2023-44466

An issue was discovered in net/ceph/messengerv2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in cephdecode32...

8.8CVSS8.9AI score0.45301EPSS
SaveExploits1References3
Rows per page
Query Builder