Lucene search
+L

508 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/30 12:00 a.m.•6 views

CVE-2006-2671: Undefined Security Weakness

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

5CVSS6.4AI score0.01156EPSS
SaveExploits0References1
NVD
NVD
•added 2006/05/25 10:02 a.m.•25 views

CVE-2006-2592

Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

7.5CVSS7.3AI score0.01553EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2006/05/25 10:00 a.m.•46 views

CVE-2006-2592

Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

7.3AI score0.01553EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/25 12:00 a.m.•5 views

CVE-2006-2592: Undefined Security Weakness

Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

7.5CVSS6.4AI score0.01553EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/10 12:00 a.m.•6 views

CVE-2006-1150: Undefined Security Weakness

Buffer overflow in Tenes Empanadas Graciela TEG 0.11.1, automatically appends an underscore to the end of duplicate nicknames, which allows remote attackers to cause a denial of service application crash by creating multiple users with long, identical nicknames, which triggers an off-by-one error...

7.8CVSS5.9AI score0.02225EPSS
SaveExploits1References1
Prion
Prion
•added 2006/03/09 12:02 a.m.•22 views

Format string

Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in 1 a nickname, 2 a dedicated server name, or 3 a mapname in a level aka .lxl file...

7.5CVSS8.2AI score0.03843EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/09 12:00 a.m.•4 views

CVE-2006-1075: Undefined Security Weakness

Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in 1 a nickname, 2 a dedicated server name, or 3 a mapname in a level aka .lxl file...

7.5CVSS6.6AI score0.03843EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2006/01/28 12:00 a.m.•54 views

[CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting

PoC : -------------------- 1 This flaw exists because the application does not validate the "nickname" variable upon submission to the post.php script via the POST method. hp://www.target/post.php?nickname="scriptalert'XSS'/script!-- --------------------...

1.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/25 12:00 a.m.•10 views

CVE-2006-0407: Undefined Security Weakness

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...

4.3CVSS5.9AI score0.0262EPSS
SaveExploits2References1
zdt
zdt
•added 2005/09/23 12:00 a.m.•27 views

Nokia Symbian 60 (Bluetooth Nickname) Remote Restart (update)

Exploit for hardware platform in category dos / poc ============================================================= Nokia Symbian 60 Bluetooth Nickname Remote Restart update ============================================================= / Nokia Bluetab Exploit Found & coded by Qnix - This Exploit wi...

7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2005/09/23 12:00 a.m.•65 views

Nokia Symbian 60 - 'BlueTooth Nickname' Remote Restart (2)

/ Nokia Bluetab Exploit Found & coded by Qnix - This Exploit will creat file called bluetab.txt with your bluetooth nickname, send the file to your nokia mobile open it copy the nickname and paste it to your bluetooth nickname, if any one search and find your nickname his mobile will restart . -...

5CVSS5.8AI score0.03111EPSS
SaveExploits1
Cvelist
Cvelist
•added 2005/09/02 4:00 a.m.•38 views

CVE-2005-2774

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...

7.8AI score0.02762EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/02 12:00 a.m.•6 views

CVE-2005-2774: Undefined Security Weakness

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...

5CVSS6.4AI score0.02762EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2005/08/26 12:00 a.m.•34 views

Quake 2 Lithium mode format string bug

Format string bug on parsing player's nickname...

3.9AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2005/08/23 4:00 a.m.•20 views

CVE-2005-2639

Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...

7.5CVSS8AI score0.05824EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/20 12:00 a.m.•6 views

CVE-2005-2639: Undefined Security Weakness

Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...

7.5CVSS6.4AI score0.05824EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2005/07/26 4:00 a.m.•38 views

CVE-2005-2376

Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via a long 1 nickname or 2 chat message...

6.9AI score0.01389EPSS
SaveExploits1References2
NVD
NVD
•added 2005/07/26 4:00 a.m.•26 views

CVE-2005-2375

Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a 1 nickname or 2 chat message...

5CVSS6.7AI score0.01297EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/07/26 12:00 a.m.•7 views

CVE-2005-2375: Undefined Security Weakness

Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a 1 nickname or 2 chat message...

5CVSS5.8AI score0.01297EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/07/26 12:00 a.m.•8 views

CVE-2005-2376: Undefined Security Weakness

Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via a long 1 nickname or 2 chat message...

5CVSS5.8AI score0.01389EPSS
SaveExploits1References1
Rows per page
Query Builder