Instant Softwares DatingSite SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.instantsoftwares.com/pddatingsite.asp Google search: Home Dating Tips Join Now Member Login Gallery Blog Chat Room About Us Contact Us Username: Admin OR WHOEVER YOU WANT!...

America Online AOL Instant Messenger AIM6.0 or 6.5 or higher XSS remote execution

Sorry for the brief post but Im still able to bypass filters that aol has put in place. So again with frustration I come to FD to imply pressure on a company to patch correct. From reading feedback from AOL they feel the vulnerability is put to bed and requires no more attention. I am not posting...

AOL Instant messenger code execution

Microsoft Internet Explorer control is used for HTML content rendering without limiting zone access...

DSA-1433-1 centericq - buffer overflow

Bulletin has no description...

iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability

iDefense Security Advisory 12.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 11, 2007 I. BACKGROUND Microsoft DirectShow, part of Microsoft DirectX, is used for the capture and playback of multimedia streams on Microsoft Windows systems. Synchronized Accessible Media Interchange...

Cross site scripting

Cross-site scripting XSS vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Gadu-Gadu instant messenger buffer overflow

Buffer overflows on emotion icons parsing...

JVN#55833292 FileMaker cross-site scripting vulnerability

FileMaker is database software from FileMaker, Inc. FileMaker contains a cross-site scripting vulnerability in its "Instant Web Publishing" function that enables users to publish database contents on the web. Impact An attacker could execute an arbitrary script on the web browser of a user who...

CVE-2003-1503

Affected software: AOL Instant Messenger (AIM) 5.2.3292. Vulnerability: Buffer overflow in handling an aim:getfile URL with a long screen name. Impact: Allows remote attackers to execute arbitrary code. Root cause: Buffer overflow in AIM’s URL handling/ascii processing (per available reports). Re...

Miranda IM多个远程栈溢出漏洞

BUGTRAQ ID: 26115 CVECAN ID: CVE-2007-5542,CVE-2007-5543 Miranda IM是Microsoft Windows平台上使用的开源多协议即时消息客户端。 Miranda IM没有正确地实现雅虎通协议，如果向客户端发送了畸形的雅虎通报文的话，就可以触发栈溢出，导致执行任意指令。 Miranda Miranda IM 0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceforge.net/project/showfiles.php?groupid=94142...

Miranda instant messenger multiple security vulnerabilities

Yahoo! messenger plugin multiple buffer overflows...

EUVD-2007-5565

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

CVE-2007-5124

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zo...

CVE-2007-5124

CVE-2007-5124 concerns AOL AIM 6.5.3.12 and earlier, where an embedded Internet Explorer server control in the AIM client renders HTML content from IM messages without proper sanitization, enabling remote code execution. The root cause relates to inadequate handling of mshtml-based HTML/JS in mes...

KLA10047 ACE vulnerability in AOL AIM

Lack of special tag filtering was found in the AIM. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to an embedded Internet Explorer server control via a specially designed message. Original...

Core Security Technologies Advisory 2007.0817

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Remote command execution, HTML and JavaScript injection vulnerabilities in AOL’s Instant Messaging software Advisory Information Title: Remote Command execution, HTML...

CVE-2007-4901

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected...

Hardcoded credentials

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected...

CVE-2007-4901

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected...

CVE-2007-4901

Affected software: AOL Instant Messenger (AIM) family on Windows (AIM 6.1.41.2, 6.2.32.1; AIM Pro; AIM Lite). Component/causal issue: embedded Internet Explorer server control (mshtml.dll) used to render HTML in instant messages, with insufficient input sanitization of inbound HTML content. Impac...