399 matches found
Pidgin: Multiple vulnerabilities
Background Pidgin is a GTK Instant Messenger client for a variety of instant messaging protocols. Description Multiple vulnerabilities have been discovered in Pidgin. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code wit...
AOL Instant Messenger 8.0.1.5 Binary Planting
!/bin/bash AOL Instant Messenger 8.0.1.5 Jul 2013 Exploit Windows XP/7 tested and working. Leverages binary file planting to My Documents via AIMs advertisement code. Little social engineering built in using javascript to try to get them to run the AIMInstall.exe. Starts a reverse shell back to...
CVE-2012-5816
AOL Instant Messenger AIM 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2012-5816
Affected software: AOL Instant Messenger (AIM) 1.0.1.2. Vulnerability: AIM does not verify that the server hostname matches the CA/SubjectAltName in the X.509 certificate, enabling MITM with an arbitrary valid certificate. Impact as described: potential credential/local data exposure due to spoof...
CVE-2012-5816
AOL Instant Messenger AIM 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2012-5816: Improper Input Validation
AOL Instant Messenger AIM 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
PT-2012-6128
Name of the Vulnerable Software and Affected Versions AOL Instant Messenger AIM version 1.0.1.2 Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...
Pidgin: Multiple vulnerabilities
Background Pidgin is an GTK Instant Messenger client. Description Multiple vulnerabilities have been discovered in Pidgin. Please review the CVE identifiers referenced below for details. Impact These vulnerabilities allow for arbitrary file retrieval, Denial of Service and arbitrary code executio...
pidgin OTR information leakage
Pidgin transmits OTR off-the-record conversations over DBUS in plaintext. This makes it possible for attackers that have gained user-level access on a host, to listen in on private conversations associated with the victim account. Pidgin is a popular Instant Messenger application that runs on a...
MS12-019: Vulnerability in DirectWrite Could Allow Denial of Service (2665364)
A denial of service vulnerability exists in the implementation of DirectWrite installed on the remote Windows host. In an Instant Messenger-based attack scenario, an attacker sending a specially crafted sequence of Unicode characters directly to an Instant Messenger client could cause the...
EFF Warns Users About Privacy Issues With New AIM Chat Client
Privacy experts at the EFF are warning users not to upgrade to the new version of the venerable AOL Instant Messenger chat client because of some serious privacy concerns with the application. The main concern is that the new version of AIM automatically logs all user conversations by default, bu...
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Advisory ID: cisco-sa-20111005-asa Revision 1.0 For Public Release 2011 October 05 1600 UTC GM...
CVE-2011-3304
Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.25.3, 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.11, 8.3 before 8.32.23, 8.4 before 8.42, and 8.5 before 8.51.1 allow remote...
Command injection
Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.25.3, 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.11, 8.3 before 8.32.23, 8.4 before 8.42, and 8.5 before 8.51.1 allow remote...
CVE-2011-3304
Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.25.3, 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.11, 8.3 before 8.32.23, 8.4 before 8.42, and 8.5 before 8.51.1 allow remote...
CVE-2011-3304: Undefined Security Weakness
Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.25.3, 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.11, 8.3 before 8.32.23, 8.4 before 8.42, and 8.5 before 8.51.1 allow remote...
PT-2011-4382 · Cisco · Cisco Asa +1
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services module in Cisco Catalyst 6500 series devices versions 7.2 before 7.25.3 Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services module in...
Windows Gather Nimbuzz Instant Messenger Password Extractor
This module extracts the account passwords saved by Nimbuzz Instant Messenger in hex format. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Nimbuzz Instant Messenger Password...
Windows Gather Trillian Password Extractor
This module extracts account password from Trillian & Trillian Astra v4.x-5.x instant messenger. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Trillian Password Extractor',...