Novell GroupWise Messenger import Command Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise Messenger. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Rodpicom Botnet spreading via Skype and MSN Messenger

Malwares are getting updated during the age of social networking. FortiGuard Labs researchers have discovered a new malware called 'Rodpicom Botnet' that spreads via messaging applications such as Skype and MSN Messenger. Dubbed W32/Rodpicom.A - Rodpicom Botnet sends a message to the victim with ...

Rodpicom Botnet spreading via Skype and MSN Messenger

Malwares are getting updated during the age of social networking. FortiGuard Labs researchers have discovered a new malware called 'Rodpicom Botnet' that spreads via messaging applications such as Skype and MSN Messenger. Dubbed W32/Rodpicom.A - Rodpicom Botnet sends a message to the victim with ...

Mobile Malware Dubbed 'Bill Shocker' Targets Chinese Android Users

A new bit of malware is targeting popular apps on Android mobile devices to spew costly spam. Beijing- and Dallas-based NQ Mobile said at least 600,000 Chinese users have been hit with the malicious code named “Bill Shocker” a.expense.Extension.a because it runs up the bills of infected users whi...

More Malware Moving on Skype

With Skype expanding its reach with services designed for small businesses, and other messaging platforms such as Microsoft Windows Messenger shutting down, Skype is becoming an attractive target for malware writers. Reports surfaced last week of the Shylock financial malware spreading on Skype a...

CVE-2012-6452 Axway Secure Messenger Username Disclosure

Product: Axway Email Firewall Component: Secure Messenger Vendor: Axway Vulnerable Versions: 6.5 and earlier on the Email Firewall EMF platform only Tested Version: 6.3.2 Build 4230 Vendor Notification: December 8, 2012 Vendor Patch: Secure Messenger version 6.5.0 Updated Release 7 Public...

Fedora 16 : firefox-17.0-1.fc16 / thunderbird-17.0-1.fc16 / thunderbird-enigmail-1.4.6-2.fc16 / etc (2012-18661)

First revision of the Social API and support for Facebook Messenger - Click-to-play blocklisting implemented to prevent vulnerable plugin versions from running without the user's permission see blog post - Updated Awesome Bar experience with larger icons - JavaScript Maps and Sets are now...

Fedora 18 : firefox-17.0-1.fc18 / thunderbird-17.0-1.fc18 / thunderbird-enigmail-1.4.6-2.fc18 / etc (2012-18731)

First revision of the Social API and support for Facebook Messenger - Click-to-play blocklisting implemented to prevent vulnerable plugin versions from running without the user's permission see blog post - Updated Awesome Bar experience with larger icons - JavaScript Maps and Sets are now...

LAN.FS Messenger 2.4 Command Execution

Title: ====== LAN.FS Messenger v2.4 - Command Execution Vulnerability Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=760 VL-ID: ===== 760 Common Vulnerability Scoring System: ==================================== 8.2 Introduction: =============...

LAN.FS Messenger 2.4 - Command Execution

LAN.FS Messenger 2.4 - Command Execution Title: ====== LAN.FS Messenger v2.4 - Command Execution Vulnerability Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=760 VL-ID: ===== 760 Common Vulnerability Scoring System:...

LAN.FS Messenger 2.4 - Command Execution

Title: ====== LAN.FS Messenger v2.4 - Command Execution Vulnerability Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=760 VL-ID: ===== 760 Common Vulnerability Scoring System: ==================================== 8.2 Introduction: =============...

Akeni LAN v1.2.118 - Filter Bypass Vulnerability

Document Title: =============== Akeni LAN v1.2.118 - Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=761 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 761 Common...

LAN.FS Messenger v2.4 - Command Execution Vulnerability

Document Title: =============== LAN.FS Messenger v2.4 - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=760 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 760...

Akeni LAN v1.2.118 - Filter Bypass Vulnerability

Document Title: =============== Akeni LAN v1.2.118 - Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=761 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 761 Common...

LAN.FS Messenger v2.4 - Command Execution Vulnerability

Document Title: =============== LAN.FS Messenger v2.4 - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=760 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 760...

CVE-2012-5816

AOL Instant Messenger AIM 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5816

Affected software: AOL Instant Messenger (AIM) 1.0.1.2. Vulnerability: AIM does not verify that the server hostname matches the CA/SubjectAltName in the X.509 certificate, enabling MITM with an arbitrary valid certificate. Impact as described: potential credential/local data exposure due to spoof...

CVE-2012-5816

AOL Instant Messenger AIM 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

LAN.FS Messenger v2.4 - Command Execution Vulnerability

Exploit for windows platform in category remote exploits LAN.FS Messenger v2.4 - Command Execution Vulnerability Introduction: ============= Lan.FS is a very quick, small and compact freeware networktool for non-commercial use only for Windows 2000/XP/2003/Vista & Windows 7. It is easy to handle...

Akeni LAN 1.2.118 Filter Bypass

A filter bypass vulnerability in Akeni LAN LE Messenger version 1.2.118 allows for malicious script insertion / cross site scripting attacks. Akeni LAN v1.2.118 - Filter Bypass Vulnerability Introduction: ============= Akeni LAN Messenger is an IM system designed for your LAN. It is easy to setup...