CVE-2010-0217

Zeacom Chat Server (before 5.1) uses a short JSESSIONID, giving low entropy and enabling brute-force session hijacking or a potential DoS via server crash. The root cause is weak session management in the web-chat component, with a 10-character JSESSIONID described as providing only about 9 bits ...

CVE-2010-0217

Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service Chat Server crash or Tomcat daemon crash via a brute-force attack...

Joomla BC Cross Site Scripting

===================================================================== Joomla! Component combc Cross Script Scripting XSS Vulnerability ===================================================================== 1. OVERVIEW The Joomla! Component combc was vulnerable to Cross Script Scripting XSS...

EFS Easy Chat Server - Authentication Request Handling Buffer Overflow (Metasploit)

$Id: efseasychatserverusername.rb 9966 2010-08-06 20:12:51Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

EFS Easy Chat Server Buffer Overflow

$Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

EFS Easy Chat Server - Universal Buffer Overflow (SEH) (Metasploit)

EFS Easy Chat Server - Universal Buffer Overflow SEH Metasploit $Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

EFS Easy Chat server Universal BOF-SEH (Meta)

Exploit for unknown platform in category remote exploits ============================================= EFS Easy Chat server Universal BOF-SEH Meta ============================================= $Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework an...

Easy Chat Server 2.2 Buffer Overflow

Title: Exploit EFS Software Easy Chat Server v2.2 EDB-ID: CVE-ID: 2004-2466 OSVDB-ID: 7416 Author: John Babio Published: 2010-01-17 Tested on: Windows XP Sp3 Eng Download Exploit Code Download Vulnerable app https://www.securinfos.info/oldsoftwaresvulnerable/EasyChatServer2.2.exe !/usr/bin/ruby...

Exploit EFS Software Easy Chat Server v2.2

Exploit for unknown platform in category remote exploits ========================================== Exploit EFS Software Easy Chat Server v2.2 ========================================== !/usr/bin/ruby Title: Exploit EFS Software Easy Chat Server v2.2 Author: John Babio Tested on: Windows XP Sp3 E...

EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow

EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow !/usr/bin/ruby Author: John Babio Tested on: Windows XP Sp3 Eng require 'net/http' require 'uri' require 'socket' jmp = "\xeb\x06\x90\x90" ppr = "\xa2\xb9\01\x10" SSLEAY32.dll pop ebx, pop ebp, ret win32exec - EXITFUNC=seh CMD=calc Size=1...

EFS Software Easy Chat Server 2.2 - Remote Buffer Overflow

!/usr/bin/ruby Author: John Babio Tested on: Windows XP Sp3 Eng require 'net/http' require 'uri' require 'socket' jmp = "\xeb\x06\x90\x90" ppr = "\xa2\xb9\01\x10" SSLEAY32.dll pop ebx, pop ebp, ret win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com shellcode =...

EFS Easy Chat Server Authentication Request Handling Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'EFS Easy Cha...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

Video chat rooms password cracking techniques-vulnerability warning-the black bar safety net

Reprint when you didn't see the picture, we only will look at. Because the working relationship, and I qq every Monday to Friday online, but very few people add me as a friend, is probably the old bar, after all, are 2 4, online Dating that period of burning passion had left me far away. But that...

JDKChat 1.5 - Remote Integer Overflow (PoC)

!/usr/bin/perl Title: JDKChat v1.5 Remote Integer Overflow PoC Summary: JDKChat is a simple C++ chat server for GNU/Linux systems. Users can connect to it through a simple tcp client like telnet. WebSite : http://www.jdkoftinoff.com/ ---------------------------- Demo...

Easy Chat Server Change Admin Password

EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba /BO...

EFS Easy Chat Server Buffer Overflow

!/usr/bin/perl EFS Easy Chat Server Authentication Request Buffer Overflow SEH Reference: http://www.milw0rm.com/exploits/8142 Tested in Windows XP Pro SP2-3 Coded by Dr4sH Bruno F. Contact: dr4shathotmaildotcom Thankz: His0ka, str0ke, Vinicius N...