CVE-2007-0814

Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...

CVE-2007-0814: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...

Adrenalin's ASP Chat XSS

Adrenalin's ASP Chat XSS By : sn0oPy Risk : high exploit : just inject any script at your psuedo or on chat, to apply it for all the users connected Dork : intitle:"ASP Chat" contact : [email protected] greetz : subzero, http://forums.avenir-geopolitique.net. reference :...

Yahoo Messanger crossaplication scripting

Chat sign in / sign out messages are shown with Internet Explorer allowing scripting in local computer zone...

Hacking tricks of teach you make a simple QQ bomb-vulnerability warning-the black bar safety net

Today for everyone to talk about a simple production of the QQ bomb regard, absolutely everyone with a look of schooling would! The first method is the use of compressed packets, the method I used to teach my sister used that method and play with her classmate, first of all, we first create a...

Fedora Core 5 : mozilla-1.7.13-1.1.fc5 (2006-487)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive files under the web root with insufficient access control, enabling remote download of (at least) ServerKey.pem and AcceptIP.txt via direct requests. Root cause: improper access restrictions exposing sensitive files. No explicit exploitation details are provi...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...

CVE-2006-6933: Undefined Security Weakness

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

CVE-2006-6890

Voodoo chat 1.0RC1b stores passwords under the web root with insufficient access control, enabling remote retrieval of passwords via a direct request to data/users.dat. Affected component: the chat application’s data storage file (data/users.dat) exposed at web root. Root cause: inadequate access...

CVE-2006-6890: Undefined Security Weakness

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

3APA3A : Hacking into HTML chats for one more time

More about HTML chat hacks one. PART ONE, or we show our own. The interface of almost any chat is based on dynamically generated HTML forms interconnected via javascript. In almost all chats, the username and password or some identifier that is generated when the user logs in is stored inside the...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

Voodoo chat 1.0RC1b Password Disclosure Vulnerability

Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, Shizoe +Exploit:...

Voodoo chat 1.0RC1b (users.dat) Password Disclosure Vulnerability

No description provided by source. Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke,...

Voodoo chat 1.0RC1b - users.dat Password Disclosure

Voodoo chat 1.0RC1b - users.dat Password Disclosure Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com...

Voodoo chat 1.0RC1b (users.dat) Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= Voodoo chat 1.0RC1b users.dat Password Disclosure Vulnerability ================================================================= Affected Software: Voodoo chat 1.0RC1b...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2006:0759)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...