Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

CVE-2010-0914

Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mail, Calendar, Address Book, and Instant Messaging...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mail, Calendar, Address Book, and Instant Messaging...

CVE-2010-0914

CVE-2010-0914 affects Oracle Sun Convergence 1.0. The Sun Convergence entry shows the vulnerability is exposed over HTTP and targets Mail, Calendar, Address Book, and Instant Messaging. The NVD entry lists an overall CVSS v2 base score of 5.0 (Network vector, Confidentiality impact Partial, other...

PG Social Networking - Arbitrary File Upload

PG Social Networking - Arbitrary File Upload ============================================================== PG Social Networking --Shell upload Vulnerabilty ============================================================== Name : PG Social Networking --Shell upload Vulnerabilty Date : july 9,2010...

AOL Instant Messenger AIM - goaway Overflow (Metasploit)

$Id: aimgoaway.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Joomla Joomdocs Cross Site Scripting

======================================= Joomla comjoomdocs XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

Joomla Component com_joomdocs XSS Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component comjoomdocs XSS Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Novell GroupWise Messenger HTTP Response Handling Stack Overflow (CVE-2008-2703)

Novell GroupWise Messenger is a corporate instant messaging solution targeting toward medium to large enterprise organizations. It facilitates secure communications and policy-based management through Novell's eDirectory product suite. The product is based on a client-server model where messaging...

BrightSuite Groupware SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

BrightSuite Groupware - SQL Injection

BrightSuite Groupware - SQL Injection 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

BrightSuite Groupware SQL Vulnerable

Exploit for asp platform in category web applications ==================================== BrightSuite Groupware SQL Vulnerable ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

BrightSuite Groupware - SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Facebook, Yelp Instant Personalization Has Holes

A now-closed Facebook exploit took advantage of cross site scripting to inject malicious code into Yelp. Normally such an attack wouldn’t have particularly broad implications for Facebook users, but Yelp is one of the three sites that have been deemed fit for Facebook’s highly controversial Insta...

Yahoo IM Worm Morphs in to Skype Malware

On the heels of a worm that was installing backdoors on Windows systems via Yahoo Instant Messenger comes a new worm that is even more sophisticated in its social engineering and payload, researchers have discovered. Read the full article. CNet...

Yahoo Messenger AudioConf ActiveX Control Buffer Overflow (CVE-2007-1680)

Yahoo! Messenger is an instant messaging communicating application developed by Yahoo! Inc. One of the features that Yahoo! Messenger provides is the ability to create conference rooms. Yahoo! Messenger users can create a conference room and invite other users to join the conference. The conferen...

DSA-2038-1 pidgin - denial of service

Bulletin has no description...

Instant CMS <= 1.1rc3 Admin (Auth Bypass) Vulnerability

======================================================= Instant CMS = 1.1rc3 Admin Auth Bypass Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 ...

Instant CMS <= 1.1rc3 Admin (Auth Bypass) Vulnerability

Exploit for php platform in category web applications ======================================================= Instant CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By :...

Symantec IM Manager Detection

Symantec IM Manager, used to manage instant messaging traffic, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45017; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...