7933 matches found
LiveZilla Cross Site Scripting
Security Advisory - Curesec Research Team ========================================= 1. Introduction ---------------- Advisory ID: Cure-2013-1006 Advisory URL: https://www.curesec.com/ Affected Product: Prior 5.1.1.0 Fixed Version: 5.1.1.0 Vendor Contact: [email protected] Vulnerability Type:...
Cryptocat, a Secure and Encrypted chat blocked in Iran
Users in Iran call Internet as "Filternet", because of the heavily censored Internet access they have. Million Iranians used VPN servers to access the outside world. In October, 2013 Jack Dorsey, the co-founder of Twitter asked Iranian President, 'Are citizens of Iran able to read your tweets?' I...
Cryptocat, a Secure and Encrypted chat blocked in Iran
Users in Iran call Internet as "Filternet", because of the heavily censored Internet access they have. Million Iranians used VPN servers to access the outside world. In October, 2013 Jack Dorsey, the co-founder of Twitter asked Iranian President, 'Are citizens of Iran able to read your tweets?' I...
Valve Steam User Chat Message Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Valve Steam. No action is necessary on the part of the vulnerable Steam user other than signing on to the Steam service. The specific flaw exists within the handling of user to user messages in the...
CVE-2013-3044
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...
Code injection
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...
CVE-2013-3044
CVE-2013-3044 affects IBM Lotus Sametime Enterprise Meeting Server versions 8.5.2 and 8.5.2.1, where remote authenticated users can spoof the origin of chat messages or publish anonymous messages by abusing meeting-attendance privileges. The issue lies in the meeting server’s handling of attendan...
CVE-2013-3044
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges...
Debian Security Advisory DSA 2775-1 (ejabberd - insecure SSL usage)
It was discovered that ejabberd, a Jabber/XMPP server, uses SSLv2 and weak ciphers for communication, which are considered insecure. The software offers no runtime configuration options to disable these. This update disables the use of SSLv2 and weak ciphers. The updated package for Debian 7 whee...
13 Anonymous Members indicted and accused of participating in 'Operation Payback'
A U.S. Grand jury indicted and accused 13 members of the hacking group Anonymous for allegedly participating in the cyber attacks against a number of websites as an anti-copyright campaign called "Operation Payback" Hackers took down the sites by inflicting a denial of service, or DDoS, attack,...
Fedora Update for ngircd FEDORA-2013-15290
Check for the Version of ngircd OpenVAS Vulnerability Test Fedora Update for ngircd FEDORA-2013-15290 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[SECURITY] Fedora 19 Update: ngircd-20.3-1.fc19
ngIRCd is a free open source daemon for Internet Relay Chat IRC, developed under the GNU General Public License GPL. It's written from scratch and is not based upon the original IRCd like many others...
Quack Chat 1.0 - Multiple Vulnerabilities
Quark Chat version 1.0 suffers from cross site scripting, path disclosure, and remote SQL injection vulnerabilities. Exploit Title: Quack Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage:...
Quack Chat 1.0 - Multiple Vulnerabilities
Exploit Title: Quack Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0 Contacts: https://twitter.com/Dylanirzi11...
Quack Chat 1.0 - Multiple Vulnerabilities
Quack Chat 1.0 - Multiple Vulnerabilities Exploit Title: Quack Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0...
Quark Chat 1.0 XSS / SQL Injection / Path Disclosure
Exploit Title: Quark Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0 Contacts: https://twitter.com/Dylanirzi11...
Chat <= 1.0.8 - Cross-Site Scripting (XSS) in 'message' Parameter
The chat WordPress plugin was affected by a Cross-Site Scripting XSS in 'message' Parameter security vulnerability...
CVE-2013-2242
mod/chat/guisockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass intended access...
CVE-2013-2242
mod/chat/guisockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass intended access...
Design/Logic Flaw
mod/chat/guisockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass intended access...