99 matches found
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
A issue was discovered in the Linux kernel, specifically in the nfconntrackirc module. In this case, the message handling mechanism can become confusing, and messages may be matched incorrectly. It is possible for a firewall to be bypassed when users use unencrypted IRC with the nfconntrackirc...
Weechat -- Multiple vulnerabilities
The Weechat project reports: Use-after-free and double free when a remote relay sends an event with an array as body. Use-after-free in the irc plugin when a batched message disconnects the server. Stack buffer overflow when building a JOIN command with channel keys...
Exploit for Improper Input Validation in Apache Camel
camel-irc irc.sendTo Header Injection Reproducer CVE-2026-490...
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the irc.sendTo header and other irc. headers in HTTP requests. An attacker can redirect outgoing IRC messages to arbitrary channels or users by injecting...
PT-2026-55904
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An injection issue exists in the Apache Camel IRC component due to improper input validation and...
EUVD-2026-39219
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given...
PT-2026-52363
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the netfilter conntrack irc helper. The issue occurs when parsing fails after a command string has been matched; the system attempts to match a different...
GHSA-55CF-XX38-4P9P OpenClaw: Workspace dotenv files cannot override connector endpoint hosts
Summary Workspace dotenv files cannot override connector endpoint hosts. Affected Packages / Versions - Package: openclaw npm - Affected versions: = 2026.4.21 - Fixed version: 2026.4.22 Impact A workspace .env file could set connector endpoint variables for Matrix, Mattermost, IRC, or...
SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel Exploits
Cybersecurity researchers have disclosed details of a new botnet operation called SSHStalker that relies on the Internet Relay Chat IRC communication protocol for command-and-control C2 purposes. "The toolset blends stealth helpers with legacy-era Linux exploitation: Alongside log cleaners...
[SECURITY] Fedora 43 Update: rust-ybaas-0.0.19-6.fc43
Don't you love when you accidentally tap your Yubikey when you have your IRC client in focus and you send 987947 into Libera? Want to be able to have that experience without having to reach all the way over to your laptop's USB port? Don't want the complexity of installing and using the yubibomb...
EUVD-2009-5118
Malware in sbrugna...
EUVD-2001-1466
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414434)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414434 advisory. An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be...
TL-BOTS
The repository TL-BOTS contains a collection of source code for various botnets. The botnets are categorized into several folders, including TL.BOTNET, TL.EXPLOITSCAN, and TL.IRC. The TL.BOTNET folder contains botnets that may be merged with TL-TROJAN at a later date, while the TL.EXPLOITSCAN...
Linux Distros Unpatched Vulnerability : CVE-2018-17019
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc. CVE-2018-17019 Note that Nessus relies on the presen...
CVE-2009-10006
UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply specifically a 001 message, the application fails to properly validate the length of...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the IRC client process when handling crafted numeric replies from an IRC server. An attacker can execute arbitrary code by sending a specially crafted 001 message during the automatic IRC connection proces...
CVE-2009-10006
UFO: Alien Invasion (versions up to and including 2.2.1) contains a stack-based buffer overflow in the built-in IRC client component. When the client processes a crafted IRC 001 numeric reply during automatic IRC connection handling, the string length validation can overflow the stack, potentiall...
PT-2025-34366 · Unknown · Ufo: Alien Invasion
Name of the Vulnerable Software and Affected Versions: UFO: Alien Invasion versions up to and including 2.2.1 Description: UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow in its built-in IRC client component. When the client connects to an IRC server and receives ...