FiSH IRC clients encryption plugin multiple security vulnerabilities

Multiple buffer overflows on different IRC messages...

tyger-sqlxss.txt

-=--------------------ADVISORY-------------------=- Tyger Bug Tracking System Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Tyger Bug Tracking System -=+ Version: 1.1.3 -=+ Vendor's URL: http://uk.homeunix.org/tyger/cms/ -=+ Platform:...

FiSH-irssi - Multiple Remote Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/22880/info FiSH is prone to multiple remote buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit these issues to execute arbitrary...

GLSA-200701-26 : KSirc: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200701-26 KSirc: Denial of Service vulnerability KSirc fails to check the size of an incoming PRIVMSG string sent from an IRC server during the connection process. Impact : A malicious IRC server could send a long PRIVMSG string t...

flashChat 4.7.8 Cross Site Scripting Vulnerability

/ Flashchat 4.7.8 / Date of written Advisory: February 04, 2007 Product: Flash Chat = 4.7.8 Vendor: http://tufat.com/ Description: flashChat is a highly customizable PHP/MySQL based chat room script that is easily integrated into a website and mimics IRC in it's command structure Exploits /...

KSirc: Denial of Service vulnerability

Background KSirc is the default KDE IRC client. Description KSirc fails to check the size of an incoming PRIVMSG string sent from an IRC server during the connection process. Impact A malicious IRC server could send a long PRIVMSG string to the KSirc client causing an assertion failure and the...

MOAB-16-01-2007: Multiple Colloquy IRC Format String Vulnerabilities

Summary Traditionally, chat clients on the Mac have been anything but glamorous. Colloquy is an advanced IRC & SILC client which aims to fill this void. By adhering to Mac OS X interface conventions, Colloquy has the look and feel of a quality Mac application. By making a common mistake the...

Colloquy IRC client multiple format string vulnerabilities

Multiple format string vulnerabilities, e.g. invite IRC command...

MOAB-16-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick = "spongebo" channeljoined = false readytogo = false...

Colloquy <= 2.1.3545 (INVITE) Format String Denial of Service Exploit

No description provided by source. !/usr/bin/ruby c Copyright 2006 Lance M. Havok [email protected] Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick =...

Colloquy 2.1.3545 - INVITE Format String Denial of Service

Colloquy 2.1.3545 - INVITE Format String Denial of Service !/usr/bin/ruby c Copyright 2006 Lance M. Havok Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick...

Fedora Core 5 : mozilla-1.7.13-1.1.fc5 (2006-487)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs...

Colloquy 2.1.3545 - 'INVITE' Format String Denial of Service

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick = "spongebo" channeljoined = false readytogo = false...

USN-409-1: ksirc vulnerability

Federico L. Bossi Bonin discovered a Denial of Service vulnerability in ksirc. By sending a special response packet, a malicious IRC server could crash ksirc...

KGB 1.9 - 'sesskglogadmin.php' Local File Inclusion

? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:...

Unfixed XSS vulnerability at www.germany-irc.eu

Security researcher iD - uNkn0wn.eu, has submitted on 01/10/2007 a cross-site-scripting XSS vulnerability affecting www.germany-irc.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

[KDE Security Advisory] ksirc Denial of Service vulnerability

KDE Security Advisory: ksirc denial of service vulnerability Original Release Date: 2007-01-09 URL: http://www.kde.org/info/security/advisory-20070109-1.txt 0. References CVE-2006-6811 http://www.milw0rm.com/exploits/3023 http://www.securityfocus.com/bid/21790 1. Systems affected: ksirc as shippe...

WebText <= 0.4.5.2 Remote Code Execution Exploit

No description provided by source. ? //Kacper Settings $exploitname = "WebText = 0.4.5.2 Remote Code Execution Exploit"; $scriptname = "WebText 0.4.5.2"; $scriptsite = "http://www.webtext.pl/?go=download"; $dork = '"Powered by WebText"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+:...

MDForum <= 2.0.1 (PNSVlang) Remote Code Execution Exploit

No description provided by source. ? //Kacper & str0ke Settings $exploitname = "MDForum = 2.0.1 PNSVlang Remote Code Execution Exploit"; $scriptname = "MDForum 2.0.1"; $scriptsite = "http://www.maxdev.pl/Contents,Download,View,8.phtml"; $dork = '"Powered by MDForum"'; // print ' :::::::::...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2006:0759)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...