CVE-2002-1351

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service chat server crash and possibly execute arbitrary code via the msgText buffer in the chatInterpretData function, as demonstrated via a long Nick nickname request...

CVE-2002-1351

The vulnerability CVE-2002-1351 affects Melange Chat System 1.10. A buffer overflow in the chat_InterpretData function, triggered by a long Nick (nickname) in an msgText buffer, allows remote attackers to cause a denial of service (chat server crash) and potentially execute arbitrary code. This i...

Morpheus 4.8 - Local Chat Passwords Disclosure

Morpheus 4.8 - Local Chat Passwords Disclosure / Morpheus 4.8 Local Chat Passwords Disclosure Exploit by Kozan Application: Morpheus 4.8 and probably prior versions Vendor: Streamcast Networks - www.streamcastnetworks.com Vulnerable Description: Morpheus 4.8 discloses chat passwords to local user...

Morpheus 4.8 - Local Chat Passwords Disclosure

/ Morpheus 4.8 Local Chat Passwords Disclosure Exploit by Kozan Application: Morpheus 4.8 and probably prior versions Vendor: Streamcast Networks - www.streamcastnetworks.com Vulnerable Description: Morpheus 4.8 discloses chat passwords to local users. Discovered & Coded by: Kozan Credits to ATma...

Morpheus <= 4.8 Local Chat Passwords Disclosure Exploit

Exploit for unknown platform in category local exploits ======================================================= Morpheus include include HKEY hKey; define BUFSIZE 100 char prgfilesBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int adresalchar FilePath,char Str char kr; int Sayac=0; int Offset=-1; FI...

CVE-2005-0919

Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting XSS attacks...

CVE-2005-0919

Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting XSS attacks...

CVE-2005-0919

CVE-2005-0919 affects Adventia Chat 3.1 and Adventia Server Pro 3.0. The flaw allows remote attackers to inject arbitrary web script/HTML into the chat space, enabling cross-site scripting (XSS) among users. Reported impact is MEDIUM (CVSS 2.0: AV:N/AC:M/Au:N/C:N/I:P/A:N); exploitation would not ...

CVE-2004-1739

Bird Chat 1.61 allows remote attackers to cause a denial of service crash via invalid users...

CVE-2004-1739

CVE-2004-1739 concerns Bird Chat 1.61, where remote attackers can trigger a denial of service (crash) by sending invalid user data. The vulnerability affects the availability of the service (CVSS v2 base score 5.0, AV:N/AC:L/Au:N/C:N/I:N/A:P). Details in connected records consistently specify Bir...

CVE-2004-1708

CVE-2004-1708 affects Webbsyte Chat 0.9.0. The connected documents consistently describe a denial of service: remote attackers can crash the service by establishing a large number of connections. No explicit exploit details, mitigations, or patch information are provided in the sources. The vulne...

CVE-2004-1708

Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service crash via a large number of connections...

[SA14385] Chat Anywhere User Credentials Disclosure

TITLE: Chat Anywhere User Credentials Disclosure SECUNIA ADVISORY ID: SA14385 VERIFY ADVISORY: http://secunia.com/advisories/14385/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Chat Anywhere 2.x http://secunia.com/product/3163/ DESCRIPTION: Kozan...

CVE-2005-0522

Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges...

CVE-2005-0522

CVE-2005-0522 affects Chat Anywhere 2.72a, where passwords are stored in plaintext in the chatroom’s INI file. This enables local users to gain privileges due to insecure credential storage (local privilege escalation). The available sources describe the root cause as plaintext storage, with no d...

Chat Anywhere 2.72a - Local Password Disclosure

Chat Anywhere 2.72a - Local Password Disclosure / Chat Anywhere 2.72a Local Exploit by Kozan Application: Chat Anywhere 2.72a Vendor:LionMax Software http://www.lionmax.com/ Vulnerable Description: Chat Anywhere 2.72a discloses passwords to local users. Discovered & Coded by: Kozan Credits to...

Chat Anywhere 2.72a - Local Password Disclosure

/ Chat Anywhere 2.72a Local Exploit by Kozan Application: Chat Anywhere 2.72a Vendor:LionMax Software http://www.lionmax.com/ Vulnerable Description: Chat Anywhere 2.72a discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2:...

Chat Anywhere 2.72a Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits ===================================================== Chat Anywhere 2.72a Local Password Disclosure Exploit ===================================================== / Chat Anywhere 2.72a Local Exploit by Kozan Application: Chat Anywhere 2.72a...

CVE-2004-1576

Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a chat message...

CVE-2004-1511

CVE-2004-1511 concerns Hotfoon 4.0, where the application does not notify users before opening links in web browsers. The described vulnerability enables a remote attacker to execute arbitrary code through a specially crafted link sent in a chat window. The available documentation states the affe...