X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin)

X7 Chat 2.0.5.1 - Cross-Site Request Forgery Add Admin Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace...

X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin)

Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace http://xxxxxxxxx.com/x7path/ to your target url. Dont forget replace...

ChatBlazer Flash Chat Cross Site Scripting

Exploit Title: ChatBlazer Flash Chat Cross Site Scripting Date: 19.04.2012 Author: Sony Software Link: www.chatblazer.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/04/chatblazer-flash-chat-cross-site.html...

Seditio Chat 1.0 Cross Site Request Forgery

========================================================= Vulnerable Software: Seditio Chat Plugin Chat İndex Plugin v 1.0 http://www.seditio-eklenti.com/page.php?id=418 http://www.seditio-eklenti.com/chat-plugin-index-d418.html Downloaded: http://www.seditio-eklenti.com/datas/users/1-chat.rar MD...

Nimbuzz 2.2.0 Cross Site Scripting

Exploit Title: Nimbuzz 2.2.0 Cross Site Scripting Date: 09.04.2012 Author: Sony Software Link: http://www.nimbuzz.com/en/get/voip-and-chat-on-pc/pc-client-downloaded Software Version: 2.2.0 Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com...

Linux Gather XChat Enumeration

This module will collect XChat's config files and chat logs from the victim's machine. There are three actions you may choose: CONFIGS, CHATS, and ALL. The CONFIGS option can be used to collect information such as channel settings, channel/server passwords, etc. The CHATS option will simply...

OS X Gather Colloquy Enumeration

This module will collect Colloquy's info plist file and chat logs from the victim's machine. There are three actions you may choose: INFO, CHATS, and ALL. Please note that the CHAT action may take a long time depending on the victim machine, therefore we suggest to set the regex 'PATTERN' option ...

Skype 5.8x / 5.5x Corruption

Title: ====== Skype 5.8x 5.5x - Corruption & Persistent Vulnerability Date: ===== 2012-03-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=455 MRSC ID: 12250 VIDEO: http://vulnerability-lab.com/getcontent.php?id=457 ; VL-ID: ===== 455 Introduction: ============= Skype...

vBulletin vBShout 6.0.5 Cross Site Scripting

Title: vBulletin vBShout Module &username=&hours=&frommonth=0&fromday=&fromyear =0&endmonth=0&endday=&endyear=0&chatroomid=0&orderby=DESC&perpage=5&s=&do=archive&instanceid=1 http://www.site.com/vbshout.php?message="&s=&do=archive&instanceid=1 vBShout is the ideal way to keep members on your foru...

Pidgin < 2.10.2 Multiple DoS

The version of Pidgin installed on the remote host is earlier than 2.10.2 and is potentially affected by the following issues : - A denial of service vulnerability NULL pointer dereference in the 'pidginconvchatrenameuser' function in 'gtkconv.c'. Remote attackers can trigger the vulnerability by...

OS X Gather Adium Enumeration

This module will collect Adium's account plist files and chat logs from the victim's machine. There are three different actions you may choose: ACCOUNTS, CHATS, and ALL. Note that to use the 'CHATS' action, make sure you set the regex 'PATTERN' option in order to look for certain log names which...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

DEBIAN-CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

Null pointer dereference

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

CVE-2011-4939

CVE-2011-4939 affects Pidgin prior to 2.10.2, where the pidgin_conv_chat_rename_user function in gtkconv.c can trigger a NULL pointer dereference in an XMPP chat room when nicknames are changed, leading to a denial of service (application crash). Public details in the provided connected documents...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

Myheritage.com / Livemocha.com Cross Site Scripting

Date: 11.03.2012 Author: Sony Web Browser : Mozilla Firefox Blog: http://st2tea.blogspot.com .................................................................. Social Networks. 5-10 minute with hands. Intersting place for cross site scripting. 1. Myheritage.com We have a multiple persistent cross...

Interpol #TangoDown, Suspected 25 Anonymous arrested

Interpol TangoDown, Suspected 25 Anonymous arrested Interpol's Web site www.interpol.int went down Tuesday just hours after the international police agency announced the arrest of 25 suspected members of the hacking collective Anonymous in Argentina, Chile, Colombia and Spain. The authorities in...

Fake Chat Screen Malware Hijacks Banking Customers

A new attack against online banking customers uses a malware platform to trick its victims into verifying bogus transactions. The attack, first described by Trusteer CTO Amit Klein, waits for an unsuspecting business banking customer to log online before telling them that “security checks” need t...