[ MDVSA-2010:041 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:041 http://www.mandriva.com/security/ Package : pidgin Date : February 18, 2010 Affected: 2008.0, 2009.1, 2010.0, Enterprise Server 5.0 Problem Description: Multiple security vulnerabilities has been...

pidgin: Finch XMPP MUC Crash

libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix three security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

RHEL 3 / 4 : seamonkey (RHSA-2010:0113)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

pidgin -- multiple remote denial of service vulnerabilities

Three denial of service vulnerabilities where found in pidgin and allow remote attackers to crash the application. The developers summarized these problems as follows: Pidgin can become unresponsive when displaying large numbers of smileys Certain nicknames in group chat rooms can trigger a crash...

Chat Bots Are Trying to Fake You Out

Web robots, commonly referred to as “bots,” are software programs written to do automated tasks, like crawling the Web looking for new sites. They also appear in chat rooms and instant messaging services masquerading as real people. Read the full article. cnet...

MobPartner Chat SQL Injection

MobPartner Chat Multiple Sql Injection Vulnerability ============================================================================ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : MobPartner .:. Download Script:...

MobPartner Chat Multiple Sql Injection Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== MobPartner Chat Multiple Sql Injection Vulnerabilities ====================================================== .:. Script : MobPartner .:. Download Script:...

EFS Easy Chat Server Buffer Overflow

$Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

EFS Easy Chat Server - Universal Buffer Overflow (SEH) (Metasploit)

EFS Easy Chat Server - Universal Buffer Overflow SEH Metasploit $Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

EFS Easy Chat server Universal BOF-SEH (Meta)

Exploit for unknown platform in category remote exploits ============================================= EFS Easy Chat server Universal BOF-SEH Meta ============================================= $Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework an...

EFS Easy Chat Server - Universal Buffer Overflow (SEH) (Metasploit)

$Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Easy Chat Server 2.2 Buffer Overflow

Title: Exploit EFS Software Easy Chat Server v2.2 EDB-ID: CVE-ID: 2004-2466 OSVDB-ID: 7416 Author: John Babio Published: 2010-01-17 Tested on: Windows XP Sp3 Eng Download Exploit Code Download Vulnerable app https://www.securinfos.info/oldsoftwaresvulnerable/EasyChatServer2.2.exe !/usr/bin/ruby...

Mobile Chat 2.0.2 Cross Site Scripting

======================================================================================== | Title : Mobile Chat v2.0.2 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site :...

Mobile Chat 2.0.2 - chatsmileys.php Cross-Site Scripting

Mobile Chat 2.0.2 - chatsmileys.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40232/info Mobile Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Exploit EFS Software Easy Chat Server v2.2

Exploit for unknown platform in category remote exploits ========================================== Exploit EFS Software Easy Chat Server v2.2 ========================================== !/usr/bin/ruby Title: Exploit EFS Software Easy Chat Server v2.2 Author: John Babio Tested on: Windows XP Sp3 E...

EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow

!/usr/bin/ruby Author: John Babio Tested on: Windows XP Sp3 Eng require 'net/http' require 'uri' require 'socket' jmp = "\xeb\x06\x90\x90" ppr = "\xa2\xb9\01\x10" SSLEAY32.dll pop ebx, pop ebp, ret win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com shellcode =...

EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow

EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow !/usr/bin/ruby Author: John Babio Tested on: Windows XP Sp3 Eng require 'net/http' require 'uri' require 'socket' jmp = "\xeb\x06\x90\x90" ppr = "\xa2\xb9\01\x10" SSLEAY32.dll pop ebx, pop ebp, ret win32exec - EXITFUNC=seh CMD=calc Size=1...

Pay Per Minute Video Chat Script 2.0 / 2.1 XSS / SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: suffer from multi XSS Vulnerability Vendor: payperviewvideosoftware.com ? Software : Pay Per Minute Video Chat Script V 2.1 - pR!CE : $269.00 USD. ? author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ?...

Pay Per Minute Video Chat Script 2.x - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/40585/info Pay Per Minute Video Chat Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacke...