2411 matches found
CVE-2007-0519
The CVE-2007-0519 entry describes a Cross-site scripting (XSS) vulnerability in memcp.php of XMB U2U Instant Messenger, allowing remote authenticated users to inject arbitrary web script or HTML via the recipient field. The consolidated sources confirm the affected component (memcp.php) and the e...
Yahoo! Messenger 8.0 - Notification Message HTML Injection
source: https://www.securityfocus.com/bid/22269/info Yahoo! Messenger is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the context of a victim's Internet...
Yahoo! Messenger 8.0 - Notification Message HTML Injection
Yahoo! Messenger 8.0 - Notification Message HTML Injection source: https://www.securityfocus.com/bid/22269/info Yahoo! Messenger is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
phpCOIN <= RC-1 (modules/mail/index.php) Remote File Include Vulnerability
phpCOIN = RC-1 modules/mail/index.php Remote File Include Vulnerability Script: phpCOIN Version: RC-1 URL: http://www.phpcoin.com/coinmodules/downloads/dload.php?id=1 Found by: Born To K!LL Bug in : modules/mail/index.php code : Include module functions file include...
XMB "U2U Instant Messenger" Cross-Site Scripting
Aria-Security Team http://Aria-Security.com Contact: [email protected] Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Software: XMB U2u Instant Messenger Explanation: First of all user must be REGISTERED - Go to...
naig052-rfi.txt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Naig = 0.5.2 thispath Remote File Include Vulnerability Script : Naig Version : 0.5.2 URL : http://mesh.dl.sourceforge.net/sourceforge/naig/naig-0.5.2.zip Found By : -= BorN To K!LL =-...
Sina UC instant messenger ActiveX buffer overflow
Buffer overflow in SendChatRoomOpt method...
CVE-2006-6728
Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...
CVE-2006-6728
Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...
CVE-2006-6728
CVE-2006-6728 describes an unspecified vulnerability in the info request mechanism of LAN Messenger prior to 1.5.1.2. The flaw allows remote attackers to cause a denial of service (application crash) or to transmit spam via unspecified vectors. Documents consistently cite the same description acr...
雅虎通YMailAttach ActiveX控件远程缓冲区溢出漏洞
BUGTRAQ ID: 21607 雅虎通是一款非常流行的即时通讯工具。 雅虎通的ymmapi.dll文件所提供的YMailAttach ActiveX控件中存在缓冲区溢出，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果用户受骗浏览了恶意的HTML文档的话，就会触发这个溢出，导致执行任意指令或导致Internet Explorer崩溃 Yahoo! Messenger = 8.0.0.863 sebug临时解决方法： 在IE中禁用YMailAttach ActiveX控件。将以下文本保存为.REG文件并导入： Windows Registry Editor Version 5....
CVE-2006-6603
Buffer overflow in the YMMAPI.YMailAttach ActiveX control ymmapi.dll before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information...
CVE-2006-6603
Buffer overflow in the YMMAPI.YMailAttach ActiveX control ymmapi.dll before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information...
CVE-2006-6603
CVE-2006-6603 is a buffer overflow in Yahoo! Messenger’s YMMAPI.YMailAttach ActiveX control (ymmapi.dll). A crafted HTML document could trigger code execution with the user’s privileges. The vulnerability affects Yahoo! Messenger prior to version 2005.1.1.4; Yahoo’s security update fixes versions...
Yahoo! Messenger YMMAPI.YMailAttach ActiveX (ymmapi.dll) Overflow
The remote host contains a version of the 'YMailAttach' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host reportedly has an unspecified buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web...
Yahoo Messenger YMailAttach ActiveX control buffer overflow
Overview The Yahoo Messenger YMailAttach ActiveX control contains a buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo Messenger is an instant messaging application. Yahoo Messenger includes several ActiveX...
Yahoo! Messenger远程搜索字符串任意浏览导航漏洞
Yahoo! Messenger是一款流行的即时通信软件。 Yahoo! Messenger不正确处理恶意消息，远程攻击者可以利用漏洞在目标用户浏览器上打开浏览器窗口到任意页面。 发送如下私有消息给目标用户： :+-%/?=/;@$@;+?/?@@-?@+@;?msg:---------------------------------------------embed onload=window.open'http:\\google.com/'helomsg...
Microsoft Windows图形设备接口附加库拒绝服务
No description provided by source. !/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to...
CVE-2006-6252
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...
CVE-2006-6252
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...