CVE-2008-7314: Uncontrolled Resource Consumption

mIRC before 6.35 allows attackers to cause a denial of service crash via a long nickname...

CVE-2015-7874

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname...

CVE-2015-7874: Buffer Copy without Checking Size of Input

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname...

Cross site scripting

A Cross-site scripting XSS vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22...

CVE-2013-4106: Improper Neutralization of Input During Web Page Generation

A Cross-site scripting XSS vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22...

CVE-2013-2258

Cryptocat before 2.0.22 has Nickname User Impersonation...

CVE-2013-2258

CVE-2013-2258 affects Cryptocat before 2.0.22, described consistently across multiple connected records as allowing Nickname User Impersonation . The available documents identify the affected product and the basic vulnerability class but do not provide detailed root cause, affected components, ex...

CVE-2013-2258: Undefined Security Weakness

Cryptocat before 2.0.22 has Nickname User Impersonation...

Cross-Site Scripting XSS Vulnerability in RGCMS

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS suffers from a cross-site scripting XSS vulnerability, which can be exploited by an attacker to...

CVE-2018-16251: Improper Neutralization of Special Elements used in an SQL Command

A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters...

CVE-2018-17079

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

CVE-2018-17079: Improper Neutralization of Input During Web Page Generation

An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area...

QIWI: Nickname disclosure through web-chat

Nickname disclosure through web-chat...

VSAXESS V2.6.2.70 build20171226_053 - Nickname Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: VSAXESS V2.6.2.70 build20171226053 - 'Nickname' Denial of Service PoC Discovery by: Diego Santamaria Vendor Homepage: https:https://www.visionistech.com/en/home/ Software Link:...

VSAXESS V2.6.2.70 build 20171226_053 - 'Nickname' Denial of Service (PoC)

Exploit Title: VSAXESS V2.6.2.70 build20171226053 - 'Nickname' Denial of Service PoC Discovery by: Diego Santamaria Discovery Date: 2018-08-31 Vendor Homepage: https:https://www.visionistech.com/en/home/ Software Link: https://www.visionistech.com/en/vsaxess-desktop-software/ Tested Version:...

Cross site scripting

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formnickname parameter to the index.php?m=core&f=set&v=sendmail URI. When the administrator accesses the "system settings - mail server"...

PT-2018-12556 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the formnickname parameter to the "index.php?m=core&f=set&v=sendmail" API endpoint. The XSS payload is triggered wh...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-14090)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject arbitrary Web script or HTML by sending the 'formnickname'...

CVE-2018-14512: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formnickname parameter to the index.php?m=core&f=set&v=sendmail URI. When the administrator accesses the "system settings - mail server"...

Irssi Out-of-Bounds Read Vulnerability

Irssi is a free, open source IRC client for use in Linux and Unix operating systems. An out-of-bounds read vulnerability exists in Irssi versions prior to 1.0.7 and 1.1.x prior to 1.1.1, which stems from the program's failure to properly handle nicknames and can be exploited by a remote attacker ...