9425 matches found
CVE-2003-1540
WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to 1 !pwds.txt and 2 !nicks.txt...
CVE-2003-1540
CVE-2003-1540 concerns WF-Chat 1.0 Beta, where sensitive information is stored under the web root with insufficient access control. The vulnerability allows remote attackers to obtain authentication-related data by directly requesting the files “!pwds.txt” and “!nicks.txt.” The available sources ...
CVE-2003-1540: Exposure of Sensitive Information to an Unauthorized Actor
WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to 1 !pwds.txt and 2 !nicks.txt...
CVE-2008-0671
Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...
CVE-2008-0671
Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...
CVE-2008-0671
Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...
Chat vulnerabilities in TinTin++ 1.97.9
Luigi Auriemma Application: TinTin++ / WinTin++ http://tintin.sourceforge.net Versions: = 1.97.9 Platforms: Windows, Linux and Mac Bugs: A chat buffer-overflow B chat YES NULL pointer C chat home folder empty files creation Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail:...
TinTin++ WinTin++ 1.97.9 - #chat Multiple Vulnerabilities
TinTin++ WinTin++ 1.97.9 - chat Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27660/info TinTin++ and WinTin++ are prone to multiple security vulnerabilities affecting the application's 'chat' functionality. These issues include a buffer-overflow vulnerability, a...
TinTin++ / WinTin++ 1.97.9 - '#chat' Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/27660/info TinTin++ and WinTin++ are prone to multiple security vulnerabilities affecting the application's 'chat' functionality. These issues include a buffer-overflow vulnerability, a denial-of-service vulnerability, and a file-overwrite vulnerability...
[waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01
waraxe-2008-SA063 - Information Leakage in Kayako SupportSuite 3.11.01 =============================================================================== Author: Janek Vind "waraxe" Date: 21. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-63.html Target software description...
Cross site scripting
Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...
IBM Lotus Sametime Client Chat消息跨站脚本漏洞
Lotus Sametime是一套企业用的即时通讯应用程序。 Lotus Sametime处理超链接信息存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 提交恶意的超链接在消息中，当用户执行鼠标移动操作就可以触发任意脚本代码执行，导致敏感信息泄漏。 IBM Lotus Sametime 7.5.1 IBM Lotus Sametime 7.5 可参考如下安全公告获得补丁信息： http://www-1.ibm.com/support/docview.wss?uid=swg21292938...
CVE-2008-0354: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...
Debian Security Advisory DSA 298-1 (epic4)
The remote host is missing an update to epic4 announced via advisory DSA 298-1. OpenVAS Vulnerability Test $Id: deb2981.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 298-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-306)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-291)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 307-1 (ircii-pana)
The remote host is missing an update to ircii-pana announced via advisory DSA 307-1. OpenVAS Vulnerability Test $Id: deb3071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 307-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 1386-1 (wesnoth)
The remote host is missing an update to wesnoth announced via advisory DSA 1386-1. OpenVAS Vulnerability Test $Id: deb13861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1386-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1386-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1386-2 (wesnoth)
The remote host is missing an update to wesnoth announced via advisory DSA 1386-2. OpenVAS Vulnerability Test $Id: deb13862.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1386-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...