Debian Security Advisory DSA 3885-1 (irssi - security update)

Multiple vulnerabilities have been discovered in Irssi, a terminal based IRC client. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2017-9468 Joseph Bisch discovered that Irssi does not properly handle DCC messages without source nick/host. A malicious IRC...

Alio Applicant Portal 6.0 SQL Injection

| \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | | | / / | | | | | |/ / | | | | \ V / | | | . | --. \ | | | | | |...

Parrot Sec: XSS on http://irc.parrotsec.org

@lalka discovered a XSS on http://irc.parrotsec.org , sub domains are out of scope but this report was submitted prior to policy change regarding sub domains submissions...

CGI:IRC irc.cgi file cross-site scripting vulnerability

CGI:IRC is a Perl/CGI program that enables users to access IRC from a Web browser. A cross-site scripting vulnerability exists in the irc.cgi file in versions of CGI:IRC prior to 0.5.12. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

CVE-2017-9469

An out-of-bound heap read was found in irssi's getfileparamscount function, during the parsing of a DCC SEND request. An IRC client connected to the same IRC network as the target could send a specially crafted request that would force irssi to read 1 byte outside of an allocated string, which...

CVE-2017-9468

A null pointer dereference was found in the way irssi handles DCC messages that do not contain a source nick/host. A malicious IRC server could be used to crash an irssi client by sending a specially crafted DCC message...

CVE-2017-9468

In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash...

CVE-2017-9468

In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash...

CVE-2017-9468

In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash...

CVE-2017-8920

CVE-2017-8920 affects CGI:IRC’s irc.cgi prior to version 0.5.12, where input from the R parameter is not properly output encoded, enabling a cross-site scripting (XSS) vector. Public sources (NVD/CNVD/OSV) describe this XSS vulnerability and reference CGI:IRC before 0.5.12. Affected component: ir...

Debian Security Advisory DSA 3853-1 (bitlbee - security update)

It was discovered that bitlbee, an IRC to other chat networks gateway, contained issues that allowed a remote attacker to cause a denial of service via application crash, or potentially execute arbitrary commands. OpenVAS Vulnerability Test $Id: deb3853.nasl 6607 2017-07-07 12:04:25Z cfischer $...

[SECURITY] Fedora 25 Update: weechat-1.7.1-1.fc25

WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...

[SECURITY] Fedora 26 Update: weechat-1.7.1-1.fc26

WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...

Hydra 8.5 - Network Logon Cracker

A very fast network logon cracker which support many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of concept...

[SECURITY] [DSA 3836-1] weechat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3836-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3836-1] weechat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3836-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2017 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3836-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-8073

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the ircctcpdccfilenamewithoutquotes function during quote removal, with a buffer overflow...

CVE-2017-8073

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the ircctcpdccfilenamewithoutquotes function during quote removal, with a buffer overflow...

CVE-2017-8073

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the ircctcpdccfilenamewithoutquotes function during quote removal, with a buffer overflow...