Joomla Room Management 1.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Room Management v1.0 - SQL Injection Google Dork: inurl:index.php?option=comroommgmt Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy: http://matamko.com/products/room-management/live-demo Dem...

Joomla! Component Room Management 1.0 - SQL Injection

Joomla! Component Room Management 1.0 - SQL Injection Exploit Title: Joomla! Component Room Management v1.0 - SQL Injection Google Dork: inurl:index.php?option=comroommgmt Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy: http://matamko.com/products/room-management/live-demo Dem...

Joomla! Component Room Management 1.0 - SQL Injection

Exploit Title: Joomla! Component Room Management v1.0 - SQL Injection Google Dork: inurl:index.php?option=comroommgmt Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy: http://matamko.com/products/room-management/live-demo Demo: http://matamko.com/products/room-management/live-de...

Phabricator: User with only Viewing Privilege can send message to Room

Hey, mongoose When the owner of a chat room gives any user Viewing Privilege, that user can then send messages to the room. As expected, there's no form to send messages when the user access the room since in theory it shouldn't be possible. However, messages via POST requests can still be sent a...

Slack: Eavesdropping on private Slack calls

A vulnerability exists in Slack's call functionality that allows a team member to eavesdrop on private ongoing Slack calls by inviting themselves into the conversation without the permission from either participant. By doing so they can eavesdrop on co-workers' private conversations as well as...

LifeSize Room 5.0.9 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware,...

LifeSize Room 5.0.9 - Multiple Vulnerabilities

LifeSize Room 5.0.9 - Multiple Vulnerabilities Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware, many similar...

Cross-site scripting vulnerability in Wordpress plugin book-a-room

book-a-room is a Wordpress plugin primarily used for library specific meeting room bookings and public events calendar system management and staff events. The book-a-room plugin is vulnerable to an xss vulnerability due to improper filtering of user input, which could allow an attacker to constru...

Badi - room rentals - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Badi - room rentals published at the 'play' market has multiple vulnerabilities...

Escape Girl's Room - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Escape Girl's Room published at the 'play' market has multiple vulnerabilities...

Room Escape 3 - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Room Escape 3 published at the 'play' market has multiple vulnerabilities...

Escape the Prison Room - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Escape the Prison Room published at the 'play' market has multiple vulnerabilities...

Spotlight: Room Escape - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Spotlight: Room Escape published at the 'play' market has multiple vulnerabilities...

BFF Salon - Tea Room Party - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BFF Salon - Tea Room Party published at the 'play' market has multiple vulnerabilities...

Murder Room - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Murder Room published at the 'play' market has multiple vulnerabilities...

Room Temperature - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Room Temperature published at the 'play' market has multiple vulnerabilities...

Room Temperature - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Room Temperature published at the 'play' market has multiple vulnerabilities...

Teen Chat Room - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Teen Chat Room published at the 'play' market has multiple vulnerabilities...

Drupal Chat Room Module Information Disclosure Vulnerability

Drupal is a free and open source content management system developed in PHP. Chat Room is one of the modules used to set up the chat room feature on the Drupal website. Drupal Chat Room fails to properly check permissions when setting up websocket sockets for chat messages, which can be exploited...

CVE-2015-8601

The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors...