9914 matches found
CVE-2005-0522
Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges...
Chat Anywhere 2.72a Local Password Disclosure Exploit
Exploit for unknown platform in category local exploits ===================================================== Chat Anywhere 2.72a Local Password Disclosure Exploit ===================================================== / Chat Anywhere 2.72a Local Exploit by Kozan Application: Chat Anywhere 2.72a...
Chat Anywhere 2.72a - Local Password Disclosure
/ Chat Anywhere 2.72a Local Exploit by Kozan Application: Chat Anywhere 2.72a Vendor:LionMax Software http://www.lionmax.com/ Vulnerable Description: Chat Anywhere 2.72a discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2:...
Chat Anywhere 2.72a - Local Password Disclosure
Chat Anywhere 2.72a - Local Password Disclosure / Chat Anywhere 2.72a Local Exploit by Kozan Application: Chat Anywhere 2.72a Vendor:LionMax Software http://www.lionmax.com/ Vulnerable Description: Chat Anywhere 2.72a discloses passwords to local users. Discovered & Coded by: Kozan Credits to...
CVE-2005-0522: Undefined Security Weakness
Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges...
CVE-2004-1576
Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a chat message...
CVE-2004-1576: Undefined Security Weakness
Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a chat message...
CVE-2004-1511
CVE-2004-1511 concerns Hotfoon 4.0, where the application does not notify users before opening links in web browsers. The described vulnerability enables a remote attacker to execute arbitrary code through a specially crafted link sent in a chat window. The available documentation states the affe...
CVE-2004-1511
Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window...
CVE-2004-1511: Undefined Security Weakness
Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window...
LanChat Pro local area network chat program DoS
Program crashes on malformed UDP packet...
ngIRCd Internet Relay Chat daemon format string bug
Format string bug in logging feature...
CVE-2004-1802
Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page...
CVE-2004-2361
Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service crash via a chat message with a large message size, which triggers an out-of-bounds read...
CVE-2004-2646
The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service uncaught NullPointerException via unknown attack vectors that cause the usrName variable to be null...
CVE-2004-2710
Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 sending certain typing statuses or 2 setting the chat room status bar to the current chat room name...
CVE-2004-2647
Free Web Chat 2.0 allows remote attackers to cause a denial of service CPU consumption via multiple connections from the same user...
CVE-2004-2465
Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2004-2466
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...