CVE-2012-6274

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors...

CVE-2012-6273: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU aka search user request...

CVE-2012-6274: Improper Authentication

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors...

CVE-2012-6275: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via 1 the filename header in an SCH request or 2 the userid component in a DUPF request...

BigAnt IM Message server and components contain multiple vulnerabilities

Overview BigAnt IM Message server and components contain multiple vulnerabilities which could allow an attacker to perform administrative functions on the the system Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2012-6273During the SH...

Windows Gather Spark IM Password Extraction

This module will enumerate passwords stored by the Spark IM client. The encryption key is publicly known. This module will not only extract encrypted password but will also decrypt password using public key. This module requires Metasploit: https://metasploit.com/download Current source:...

IM Sources Control Panel SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- SQL Injection To access the Control Panel Script IM Sources -------------------------------------------------------------------------------- Author = Soly Hacler...

Slackware: Security Advisory (SSA:2004-026-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-3308

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

CVE-2012-3308

IBM Sametime 8.0.2–8.5.2.1 is vulnerable to cross-site scripting (XSS) via an IM chat, per CVE-2012-3308. The connected documents confirm the affected version range and the basic impact (arbitrary script/HTML injection), but do not provide explicit root-cause details, affected component names, or...

CVE-2012-3308

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

CVE-2012-3308: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

AOL dnUpdater ActiveX dnu.exe Init() Method Remote Code Execution

The remote host has an install of the AOL dnUpdater ActiveX control dnu.exe prior to version 1.1.25.1. As such, it reportedly does not properly verify the function pointer passed by the 'pData' argument of the control's 'Init' method. A remote attacker could exploit this vulnerability by tricking...

IM Storm SQL Injection

! Title : IM Storm SQL Injection Vulnerability ! Author : AtlasTeam ! Author Home : AtlasTeam.ir ! Contact : AtlasTeam.ir @ Gmail dot Com ! Risk Level : High ! Date : Monday, June 4, 2012 ! Vendor : imstorm.com ! Tested On : OpenBSD, Backtrack 5, Windows XP ! Vulnerability Details...

Cyberoam UTM 10.01.2 build 059 File Include Vulnerabilities

Exploit for multiple platform in category web applications Title: ====== Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Introduction: ============= Cyberoam Unified Threat Management appliances offer comprehensive security to organizations, ranging from large enterprises to small...

Symantec IM Manager Multiple Cross Site Scripting vulnerabilities (CVE-2011-0552)

Multiple cross-site scripting vulnerabilities have been reported in Symantec IM Manager. The vulnerabilities are due to improper sanitization of URL parameters input by the IM Manager management console. A remote attacker could exploit these vulnerabilities by enticing users to click on a link...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Advisory ID: cisco-sa-20120314-asa Revision 1.0 For Public Release 2012 March 14 16:00 UTC GMT...

Symantec IM Manager Web Interface ProcessAction Code Execution (CVE-2011-0554)

A remote code execution vulnerability has been reported in Symantec IM Manager Web Interface...

Symantec IM Manager Web Interface ProcessAction Code Execution (CVE-2011-0554)

A remote code execution vulnerability has been reported in Symantec IM Manager Web Interface. The vulnerability is due to insufficient validation of certain HTTP request parameters. An attacker may exploit this vulnerability by sending HTTP requests with a crafted URI string to an affected server...