Debian DSA-1744-1 : weechat - missing input sanitization

Sebastien Helleu discovered that an error in the handling of color codes in the weechat IRC client could cause an out-of-bounds read of an internal color array. This can be used by an attacker to crash user clients via a crafted PRIVMSG command. The weechat version in the oldstable distribution...

Debian: Security Advisory (DSA-1735-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit (SEH)

Exploit for unknown platform in category remote exploits ========================================================== Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH ========================================================== !/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflo...

Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit (SEH)

Summary The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same interests as you. Join channels where you can meet people speaking your language, or start your own. No monthly fees or other hassle, jus...

Talkative IRC v0.4.4.16 Response Buffer Overflow

This module exploits a stack buffer overflow in Talkative IRC v0.4.4.16. When a specially crafted response string is sent to a client, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/misc/talkative/response msf undefinedresponse show actions ...actions...

Talkative IRC 0.4.4.16 - Remote Stack Overflow (SEH)

Talkative IRC 0.4.4.16 - Remote Stack Overflow SEH !/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH Summary: The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same...

Talkative IRC 0.4.4.16 Stack Overflow

!/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH Summary: The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same interests as you. Join channels where you can meet people...

Debian DSA-1735-1 : znc - missing input sanitization

It was discovered that znc, an IRC proxy/bouncer, does not properly sanitize input contained in configuration change requests to the webadmin interface. This allows authenticated users to elevate their privileges and indirectly execute arbitrary commands CVE-2009-0759 . %NASLMINLEVEL 70300 C...

Cross site scripting

Cross-site scripting XSS vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name. NOTE: some of these details are obtained from third party information...

CVE-2009-0861

The CVE-2009-0861 issue affects phpDenora prior to 1.2.3, where an XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via an IRC channel name. The root cause is a cross-site scripting flaw in handling channel names; impact is web scripting execution on affected deplo...

CVE-2009-0861: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name. NOTE: some of these details are obtained from third party information...

PHP-Fusion Book Panel Module SQL Injection

/+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\ + + + |----------------------------------------------------------------| + + | PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability | + +...

Gentoo Security Advisory GLSA 200903-02 (znc)

The remote host is missing updates announced in advisory GLSA 200903-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

RedHat Update for seamonkey RHSA-2008:0547-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2008:0547-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for seamonkey RHSA-2008:1037-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2008:1037-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for seamonkey RHSA-2008:0977-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2008:0977-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

ZNC: Privilege escalation

Background ZNC is an advanced IRC bouncer. Description cnu discovered multiple CRLF injection vulnerabilities in ZNC's webadmin module. Impact A remote authenticated attacker could modify the znc.conf configuration file and gain privileges via newline characters in e.g. the QuitMessage field, and...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

XChat PySys_SetArgv函数命令执行漏洞

BUGTRAQ ID: 33444 CVECAN ID: CVE-2009-0315 X-Chat是一款免费开放源代码的IRC客户端。 xchat的Python模块中使用了不可信任的搜索路径，本地用户可以在当前工作目录中放置恶意的Python文件并利用PySysSetArgv函数调用中的安全漏洞（CVE-2008-5983）执行任意代码。 X-Chat X-Chat 2.8.7b X-Chat X-Chat 2.8.6 厂商补丁： X-Chat ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2009:0325)

Updated SeaMonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...