CVE-2011-3693

NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server credentials by reading the NetSaro.fdb file...

CVE-2011-3692

CVE-2011-3692 affects NetSaro Enterprise Messenger Server 2.0. The issue is information disclosure: the product stores cleartext console credentials in configuration.xml, allowing local users to read the file and decode credentials via base64. The NVD entry lists a low severity (CVSS v2 base scor...

CVE-2011-3693

CVE-2011-3693 affects NetSaro Enterprise Messenger Server 2.0. The vulnerability arises because credentials are stored in the NetSaro.fdb file, which local users can read, leading to cleartext server credentials exposure. The impact is partial confidentiality loss on a local basis; attack vector ...

XSS Ebuddy (responsible disclosure)

Early this morning, the security group Virtual Luminous published a vulnerability in 'Ebuddy Web Messenger' and we would like to inform you that this vulnerability had been discovered and reported to the vendor on June 5th, 2011 by DcLabs Security Research Group. In the report below you are going...

Persistent XSS vulnerability in eBuddy Web Messenger

Persistent XSS vulnerability in eBuddy Web Messenger A team member from Virtual Luminous Security, Russian Federation, has discovered a persistent XSS vulnerability in eBuddy the biggest web IM solution in the world by transmitting messages with embedded encoded javascript code. In-depth detail...

Persistent XSS vulnerability in eBuddy Web Messenger

Persistent XSS vulnerability in eBuddy Web Messenger A team member from Virtual Luminous Security , Russian Federation, has discovered a persistent XSS vulnerability in eBuddy the biggest web IM solution in the world by transmitting messages with embedded encoded javascript code. In-depth detail...

NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities

=================================================== Secur-I Research Group Security Advisory SV-2011-004 =================================================== Title: NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities Product: Enterprise Messenger Server Vulnerable version: 2.0 Other version...

eBuddy Web Messenger Cross Site Scripting

\ \ / / | | | | \ \ / / | || '|| || | | | / || | \ V / | || | | | | || || | || | / |||| | ,| ,||| | | | | | | | || ' \ | || ' \ / \ | | | |/ | | || || || | | | | || || | | || || || |\ \ ||,||| || |||||| || / ,||/ warv0x, krypt0n, Russian Fedration, sol@riss0lar, yoadee P.S: Shoutout to...

NetSaro Enterprise Messenger Cross Site Scripting and HTML Injection Vulnerabilities

NetSaro Enterprise Messenger is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted...

NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Title: NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities Product: Enterprise Messenger Server Vulnerable version: 2.0 Other versions could also be affected Fixed version: N/A Impact: Medium Homepage: http://netsaro.com/Downloads.aspx...

NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities

NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities =================================================== Secur-I Research Group Security Advisory SV-2011-004 =================================================== Title: NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities Product:...

NetSaro Enterprise Messenger Server Administration Console Source Code Disclosure

Vulnerability title: NetSaro Enterprise Messenger Server Administration Console Null Byte Request Source Code Disclosure CVSS Risk Rating: 5 Medium Product: NetSaro Enterprise Messenger Server Application Vendor: SEM Software Vendor URL: http://www.netsaro.com/ Public disclosure date: 8/22/2011...

NetSaro Enterprise Messenger Server Source Code Disclosure Vulnerability

NetSaro Enterprise Messenger Server is prone to source code disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

NetSaro Enterprise Messenger Server Plaintext Password Storage Vulnerability

NetSaro Enterprise Messenger Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NetSaro Enterprise Messenger Server weak encryption

Passwords are stored in cleartext or in reverible form...

NetSaro Enterprise Messenger Server Administration Console Weak Cryptographic Password Storage Vulnerability

NetSaro Enterprise Messenger Server Administration Console Weak Cryptographic Password Storage Vulnerability CVSS Risk Rating: 4.6 Medium Product: NetSaro Enterprise Messenger Server Application Vendor: SEM Software Vendor URL: http://www.netsaro.com/ Public disclosure date: 8/15/2011 Discovered...

NetSaro Enterprise Messenger Server Plaintext Password Storage Vulnerability

NetSaro Enterprise Messenger Server Plaintext Password Storage Vulnerability CVSS Risk Rating: 4.6 Medium Product: NetSaro Enterprise Messenger Server Application Vendor: SEM Software Vendor URL: http://www.netsaro.com/ Public disclosure date: 8/15/2011 Discovered by: Rob Kraus, Jose Hernandez, a...

Windows Gather Nimbuzz Instant Messenger Password Extractor

This module extracts the account passwords saved by Nimbuzz Instant Messenger in hex format. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Nimbuzz Instant Messenger Password...

Windows Gather Trillian Password Extractor

This module extracts account password from Trillian & Trillian Astra v4.x-5.x instant messenger. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Trillian Password Extractor',...

CentOS Update for finch CESA-2009:1139 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2009:1139 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...