iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability

Novell GroupWise Messenger nmma.exe DoS Vulnerability iDefense Security Advisory 10.02.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 02, 2006 I. BACKGROUND Novell Messenger is a corporate, cross-platform instant messaging product that is based on Novell eDirectory. More information...

webnews <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit

============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v1.4...

CVE-2006-4975

Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...

CVE-2006-4975

Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...

CVE-2006-4975

CVE-2006-4975 concerns Yahoo! Messenger for WAP, where saving messages that contain JavaScript enables user-assisted remote script/HTML injection via a URL on the service. The vulnerability is tied to how messages could be stored and later rendered, allowing arbitrary script execution in affected...

AOL Instant Messenger goaway Overflow

This module exploits a flaw in the handling of AOL Instant Messenger's 'goaway' URI handler. An attacker can execute arbitrary code by supplying an overly sized buffer as the 'message' parameter. This issue is known to affect AOL Instant Messenger 5.5. This module requires Metasploit:...

CVE-2006-4615

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file...

CVE-2006-4615

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file...

CVE-2006-4615

The CVE documents a vulnerability in Shape Services IM+ Mobile Instant Messenger for Pocket PC, version 3.10, where usernames and passwords are stored in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg. This local-access issue allows a user with file-read privileges to obtain credentials. Affected ...

CVE-2006-4347

SQL injection vulnerability in user logon authentication request handling in CoolCoolD.exe in Cool Manager 5.0 5,60,90,28 and Cool Messenger Office/School Server 5.5 5,65,12,13 allows remote attackers to execute arbitrary SQL commands via the username field...

CVE-2006-4347

SQL injection vulnerability in user logon authentication request handling in CoolCoolD.exe in Cool Manager 5.0 5,60,90,28 and Cool Messenger Office/School Server 5.5 5,65,12,13 allows remote attackers to execute arbitrary SQL commands via the username field...

[Full-disclosure] [vuln.sg] Cool Messenger Server SQL Injection Vulnerability

vuln.sg Vulnerability Research Advisory Cool Messenger Server SQL Injection Vulnerability by Tan Chew Keong Release Date: 2006-08-23 Summary ------- A vulnerability has been found in Cool Messenger Office/School Server. When exploited, the vulnerability allows any people to logon to the messenger...

DeluxeBB Multiple Vulnerabilities

DeluxeBB Multiple Vulnerabilities Author: Attila Gerendi Darkz Date: July 30, 2006 Package: DeluxeBB http://www.deluxebb.com/ Versions Affected: 1.08 Other versions may also be affected. Severity: Cross-Site Scripting, Cookie Manipulation, Login Bypass Cross-Site Scripting: When posting a new top...

Yahoo! Messenger < 8.0.0.863 File Extension Spoofing

Binary data 3700.prm...

Yahoo! Messenger 8.0.0.863 - File Extension Spoofing

Yahoo! Messenger 8.0.0.863 - File Extension Spoofing source: https://www.securityfocus.com/bid/19353/info A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error. An attacker may leverage this issue to spoof downloaded filenames to...

Yahoo! Messenger 8.0.0.863 - File Extension Spoofing

source: https://www.securityfocus.com/bid/19353/info A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error. An attacker may leverage this issue to spoof downloaded filenames to unsuspecting users. This issue may lead to a...

gdiplus.pl.txt

!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...

Gdiplus.dll division by 0

!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...

Yahoo! Messenger 7.0/7.5 - Remote Search String Arbitrary Browser Navigation

source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary page. This issue occurs because the application fails to sanitize malicious...

Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation

Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary...