2383 matches found
Security feature bypass
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-0868
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-0868
CVE-2007-0868 concerns an unspecified vulnerability in the chat room feature of Yahoo! Messenger up to version 8.1.0.239, allowing a remote attacker to cause a denial of service. The impact is described as partial availability loss, with no confidentiality or integrity impact stated. The vulnerab...
CVE-2007-0868
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-0768
Multiple cross-site scripting XSS vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the 1 First Name, 2 Last Nam...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the 1 First Name, 2 Last Nam...
CVE-2007-0768
CVE-2007-0768 affects Yahoo! Messenger
CVE-2007-0768
Multiple cross-site scripting XSS vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the 1 First Name, 2 Last Nam...
Yahoo! Messenger通知消息HTML注入漏洞
Yahoo! Messenger是一款流行的即时通信程序。 Yahoo! Messenger处理通知消息缺少过滤，远程攻击者可以利用漏洞进行跨站脚本攻击，获得目标用户敏感信息。 Hai Nam Luke发现问题存在对对话框中，自动通知消息如?Hai Nam Luke has signed out. 1/26/2007 10:03 PM? or ?Hai Nam Luke has signed back in. 1/26/2007 10:04 PM?可被注入恶意脚本，Yahoo Messenger使用Internet...
Windows Live Messenger / Windows MSN Messenger decryptable password
Password is stored in registry in reversable encryption...
Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
DESCRIPTION: I’ve found a cross-site scripting vulnerability in Yahoo! Messenger, a popular advertisement-supported instant messaging client and protocol provided by Yahoo! Attacker can inject a malicious script with local privilege to Y!M notification message. The vulnerability is discovered in...
Yahoo Messanger crossaplication scripting
Chat sign in / sign out messages are shown with Internet Explorer allowing scripting in local computer zone...
CVE-2007-0519
The CVE-2007-0519 entry describes a Cross-site scripting (XSS) vulnerability in memcp.php of XMB U2U Instant Messenger, allowing remote authenticated users to inject arbitrary web script or HTML via the recipient field. The consolidated sources confirm the affected component (memcp.php) and the e...
Yahoo! Messenger 8.0 - Notification Message HTML Injection
Yahoo! Messenger 8.0 - Notification Message HTML Injection source: https://www.securityfocus.com/bid/22269/info Yahoo! Messenger is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
Yahoo! Messenger 8.0 - Notification Message HTML Injection
source: https://www.securityfocus.com/bid/22269/info Yahoo! Messenger is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the context of a victim's Internet...
phpCOIN <= RC-1 (modules/mail/index.php) Remote File Include Vulnerability
phpCOIN = RC-1 modules/mail/index.php Remote File Include Vulnerability Script: phpCOIN Version: RC-1 URL: http://www.phpcoin.com/coinmodules/downloads/dload.php?id=1 Found by: Born To K!LL Bug in : modules/mail/index.php code : Include module functions file include...
XMB "U2U Instant Messenger" Cross-Site Scripting
Aria-Security Team http://Aria-Security.com Contact: [email protected] Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Software: XMB U2u Instant Messenger Explanation: First of all user must be REGISTERED - Go to...
naig052-rfi.txt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Naig = 0.5.2 thispath Remote File Include Vulnerability Script : Naig Version : 0.5.2 URL : http://mesh.dl.sourceforge.net/sourceforge/naig/naig-0.5.2.zip Found By : -= BorN To K!LL =-...
Sina UC instant messenger ActiveX buffer overflow
Buffer overflow in SendChatRoomOpt method...
CVE-2006-6728
Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...