PT-2026-3404

Name of the Vulnerable Software and Affected Versions LobeChat versions prior to 2.0.0-next.180 Description LobeChat is an open source chat application platform. A stored Cross-Site Scripting XSS issue exists in the Mermaid artifact renderer, enabling attackers to execute arbitrary JavaScript...

EUVD-2022-38801

Malicious code in bioql PyPI...

EUVD-2022-26870

Malicious code in bioql PyPI...

Achat 安全漏洞

Achat is an open source chat software from Achat Open Source. A security vulnerability exists in Achat version v0.150, which stems from a stack buffer overflow that could lead to remote code execution...

Mattermost Resource-Consuming Vulnerability

Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...

Unspecified vulnerability in Zulip server (CNVD-2021-39546)

Zulip server is an open source team chat application from the American company Zulip. A security vulnerability exists in version 3.x prior to Zulip Server 3.4, which stems from the ability of an organization administrator to move messages to streams in other organizations hosted by the same Zulip...

Rocket.Chat Security Vulnerability

Rocket.Chat is an open source team chat software. A security vulnerability exists in Rocket.Chat 3.7.1, which can be exploited by an attacker to perform e-mail address enumeration...

Cryptocat Information Disclosure Vulnerability

Cryptocat is an open source online cryptographic chat application. An information disclosure vulnerability exists in versions of Cryptocat prior to 2.0.22. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the...

Deserialization Vulnerability in AjaxChat

AjaxChat is a JavaScript, PHP and MySQL implementation of open source Web chat software , released under the GNU Affero General Public License. AjaxChat has a deserialization vulnerability in the commandtpl.php file in the use of the ajaxchat source code, which allows an attacker to construct...