x7-xss.txt

X7 Chat 2.0.4 XSS ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : X7 Chat 2.0.4 ---------- Download : http://www.x7chat.com/releases/v2/x7chat205.zip ---------- Vuln Type: XSS ---------- Registerglobals: ON -----------------...

X7 Chat 2.0.4 - 'frame.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

X7 Chat 2.0.4 - upgradev1.php Cross-Site Scripting

X7 Chat 2.0.4 - upgradev1.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

X7 Chat 2.0.4 - frame.php Cross-Site Scripting

X7 Chat 2.0.4 - frame.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

X7 Chat 2.0.4 - 'upgradev1.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Fedora 7 : seamonkey-1.1.5-1.fc7 (2007-2601)

SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. By leveraging browser flaws, users could be fooled into possibly surrendering sensitive information CVE-2007-1095, CVE-2007-3511, CVE-2007-3844, CVE-2007-5334. Malformed web content cou...

Fedora 7 : wesnoth-1.2.7-1.fc7 (2007-2496)

Security fix release: A malicious user could send a long chat message with multibyte characters, the server would truncate the message on a fixed length, without paying attention to the multibyte characters. This led to invalid utf-8 on the client and an uncaught exception was thrown. Note that...

omnistar-xss.txt

HSC Omnistar Live Software Cross-Site Scripting Vulrnability Omnistar Live is web based PHP help desk software used by webmasters that combines live chat and helpdesk software in one easy to use solution. Our customer service software combines ticketed support web and email based, live chat and a...

blabchat-xss.txt

+==================================================================+ + BlaB! Chat 3.3 XSS Multiple Remote Vulnerabilities + +==================================================================+ Authors: Ivan Sanchez & Maximiliano Soler Product: BlaB! Chat Web: http://hot-things.net/ Versions: 3.3...

[SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-2 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...

DSA-1386-1 wesnoth

Bulletin has no description...

Debian DSA-1386-1 : wesnoth - programming error

A problem has been discovered in the processing of chat messages. Overly long messages are truncated by the server to a fixed length, without paying attention to the multibyte characters. This leads to invalid UTF-8 on clients and causes an uncaught exception. Note that both wesnoth and the wesno...

CVE-2004-2724

The CVE-2004-2724 entry affects LionMax Software Chat Anywhere 2.72a. A crafted username beginning with a percent sign followed by a null character can trigger a denial of service, causing the server to crash and the client to exhibit high CPU usage. The connected documents confirm this vulnerabi...

CVE-2004-2724

LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service server crash and client CPU consumption via a username beginning with percent % followed by a null character...

CVE-2004-2724: Improper Authentication

LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service server crash and client CPU consumption via a username beginning with percent % followed by a null character...

Tencent QQ scene vulnerability to the hack of the law-vulnerability and early warning-the black bar safety net

According to analysys international released the 2 0 0 7 in the first 2 quarters of China im market quarterly monitoring report shows, Chinese active IM software account has reached 3. 7 6 million, which has 2. 9 million active user accounts for Tencent QQ is well deserved IM the king. But did yo...

Microsoft Security Bulletin MS07-054 - Important Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution (942099)

Microsoft Security Bulletin MS07-054 - Important Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution 942099 Published: September 11, 2007 Version: 1.0 General Information Executive Summary This important security update resolves a publicly disclosed...

MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution (942099)

The remote host is running MSN Messenger or Windows Live Messenger. The version of Messenger used on the remote host is vulnerable to a remote buffer overflow in the way it handles webcam and video chat sessions. An attacker may exploit this vulnerability to execute arbitrary code on the remote...

CVE-2007-2931

Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...