[Full-Disclosure] XSS in SCI Photo Chat Server 3.4.9

Donato Ferrante Application: SCI Photo Chat Server http://www.simmcomm.ch/ Version: 3.4.9 Bug: cross site scripting Date: 02-Jul-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

Easy Chat Server 1.x - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/10649/info It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities. The chat software is implemented as a web server serving a chat web application to clients. The software is reported to contain two denial of...

[NT] ignitionServer Server Linking Password Verification Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

12Planet Chat Server Error Message Path Disclosure

The remote host is running 12Planet Chat Server - a web-based chat server written in Java. There is a flaw in this version which allows an attacker to obtain the physical path of the installation by sending a malformed request to this service. Knowing this information will help an attacker to mak...

12Planet Chat Server Administration Authentication Cleartext Credential Disclosure

The remote host is running 12Planet Chat Server, a web-based chat server written in Java. It is, therefore, affected by a credential disclosure vulnerability due to connections to this server being done via cleartext. A man-in-the-middle attacker can exploit this vulnerability to obtain the...

12Planet Chat Server 2.5 - Error Message Installation Full Path Disclosure

12Planet Chat Server 2.5 - Error Message Installation Full Path Disclosure source: https://www.securityfocus.com/bid/7355/info When certain malformed URL requests are sent to a 12Planet Chat Server, the server's installation path may be revealed in the returned error message. This information cou...

12Planet Chat Server 2.5 - Error Message Installation Full Path Disclosure

source: https://www.securityfocus.com/bid/7355/info When certain malformed URL requests are sent to a 12Planet Chat Server, the server's installation path may be revealed in the returned error message. This information could be used by a remote attacker to launch further attacks against the chat...

Melange Chat Server 1.10 - Remote Buffer Overflow

Melange Chat Server 1.10 - Remote Buffer Overflow / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible to...

Melange Chat Server 1.10 Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ======================================================= Melange Chat Server 1.10 Remote Buffer Overflow Exploit ======================================================= / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit ...

Melange Chat Server 1.10 - Remote Buffer Overflow

/ Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible to control even the EIP, not just one byte of EIP...

CVE-2002-0552

Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a long argument in the /yell command, 2 long lines in the /etc/melange.conf configuration file, 3 long file names, or possibly other...

CVE-2002-0552

Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a long argument in the /yell command, 2 long lines in the /etc/melange.conf configuration file, 3 long file names, or possibly other...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name e.g., GET /aux HTTP/1.0...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 is affected; a remote attacker can trigger a denial of service by sending a URL request that includes a MS-DOS device name (for example, GET /aux HTTP/1.0). The available sources do not provide hardware/versions beyond the affected product/...

CVE-2001-0615

The CVE-2001-0615 entry describes a directory traversal in Faust Informatics Freestyle Chat server prior to 4.1 SR3. The flaw allows a remote attacker to read arbitrary files by sending a specially crafted URL that abuses variations of the dot-dot sequence (for example, ... or ....). The availabl...

CVE-2001-0581

Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service crash via a large number of connections to port 6387...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name e.g., GET /aux HTTP/1.0...

CVE-2001-0581

CVE-2001-0581 affects Spytech Spynet Chat Server 6.5. The vulnerability allows a remote attacker to cause a denial of service (crash) by establishing a large number of connections to port 6387. The NVD entry lists a CVSS v2 base score of 5.0 (MEDIUM) with network attack vector and no privileges r...