LiveZilla 5.3.0.8 XSS

Name field (name="form_111") in chat.php may be used to send XSS visible inside Webbased Operator Client.

Proof of Concept

Put XSS inside Name field in chat.php for example:

<script>alert("XSS");</script>

XSS will be visible for operator whose uses Webbased Operator Client and accept your chat and receive at least two messages from you.

Vulnerabilities

This vulnerability allows a normal user to modify the permissions of repositories that he normally shouldn’t have access to.

2 MIN READ

Vulnerabilities

This is part 1 of 3 about bugs inside Gitea

5 MIN READ

Vulnerabilities

How to create a Metasploit module in example?

1 MIN READ