449 matches found
CVE-2009-1620
Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...
CVE-2009-1620: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...
CVE-2008-6702: Improper Input Validation
S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service crash via a long nickname, which triggers an exception...
CVE-2008-6672
Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service "runtime error" via a crafted join packet to UDP port 27960, probably related to an invalid nickname command...
CVE-2008-6672: Undefined Security Weakness
Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service "runtime error" via a crafted join packet to UDP port 27960, probably related to an invalid nickname command...
CVE-2009-1245: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the inserttopastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the 1 subject, 2 language, and 3 nickname parameters to...
YapBB <= 1.2 (forumID) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...
Nokia Symbian 60 (Bluetooth Nickname) Remote Restart (update)
No description provided by source. / Nokia Bluetab Exploit Found & coded by Qnix - This Exploit will creat file called bluetab.txt with your bluetooth nickname, send the file to your nokia mobile open it copy the nickname and paste it to your bluetooth...
Trillian 3.1 basic nick crash
I found a flaw in the trillian 3.1 for Windows. It is that on receipt of a nickname too long with some characters, this leads to break the program, the failure of the curious is that when the abri with ollydbg tries to read the argument of the message such as whether to wear the nickname long...
CVE-2008-1429
Secure Internet Live Conferencing SILC Server before 1.1.1 allows remote attackers to cause a denial of service daemon crash via a NEWCLIENT packet without a nickname...
CVE-2007-6486
Multiple cross-site scripting XSS vulnerabilities in shout.php aka the shoutbox in LineShout 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 username nickname or 2 message parameter. NOTE: some of these details are obtained from third party information...
PT-2007-6957 · Rigs Of Rods Team · Rigs Of Rods
Name of the Vulnerable Software and Affected Versions: Rigs of Rods RoR versions prior to 0.33d SP1 Description: The issue is related to a buffer overflow in the Sequencer::queueMessage function, which can be triggered by sending a nickname and then a vehicle name in a MSG2 USE VEHICLE message wi...
CVE-2007-4832
Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...
CVE-2007-4832
Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...
CVE-2007-4832: Use of Externally-Controlled Format String
Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...
CVE-2007-4754
Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...
CVE-2007-4754: Use of Externally-Controlled Format String
Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...
CVE-2007-4446
CVE-2007-4446 affects the Toribash server (2.71 and earlier). The vulnerability is a format string issue in the NICK command (client nickname) that can allow remote attackers to execute arbitrary code. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexi...
Buffer overflow
Multiple buffer overflows in Live for Speed LFS demo, S1, and S2 allow remote authenticated users to 1 cause a denial of service server crash and probably execute arbitrary code via an ID 3 packet with a long nickname field, and 2 cause a denial of service server crash via an ID 10 packet...