450 matches found
CVE-2011-2943
The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...
CVE-2011-2943
The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...
DEBIAN-CVE-2011-2943
The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...
CVE-2011-2943
The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...
CVE-2011-2943: Undefined Security Weakness
The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...
XpressEngine 1.4.5.7 Persistent XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: XpressEngine version 1.4.5.7 Persistent XSS Vulnerability Date: 2011.08.08 Author: v0nSch3lling Software Link: http://www.xpressengine.com Version: 1.4.5.7 Tested on: Microsoft Windows XP SP2 Case 1. Memeber ManagementDelete...
Google VPs Discuss Google+ "Real Name" Rapture Fiasco
Call it the Real Name Rapture: the mass disappearance of untold numbers of Google+ users over the weekend for what many outlets reported were violations of Google’s community standards policy. Rather than getting taken up, however, it appears that Google was cracking down – on funky names,...
IRCDelphi IRC server DoS
Crash on nickname parsing...
CVE-2010-0936
Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...
CVE-2010-0936
Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...
CVE-2010-0936: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...
Code injection
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
CVE-2010-0420
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
CVE-2010-0420: Improper Input Validation
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
Mandriva Linux Security Advisory : pidgin (MDVSA-2010:041)
Multiple security vulnerabilities has been identified and fixed in pidgin : Certain malformed SLP messages can trigger a crash because the MSN protocol plugin fails to check that all pieces of the message are set correctly CVE-2010-0277. In a user in a multi-user chat room has a nickname containi...
CVE-2009-3051: Use of Externally-Controlled Format String
Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the 1...
Format string
Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...
CVE-2009-2916
Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...
CVE-2009-2916: Use of Externally-Controlled Format String
Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...