CVE-2008-0671

Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...

CVE-2008-0671

Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...

CVE-2008-0671

Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...

Chat vulnerabilities in TinTin++ 1.97.9

Luigi Auriemma Application: TinTin++ / WinTin++ http://tintin.sourceforge.net Versions: = 1.97.9 Platforms: Windows, Linux and Mac Bugs: A chat buffer-overflow B chat YES NULL pointer C chat home folder empty files creation Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail:...

TinTin++ WinTin++ 1.97.9 - #chat Multiple Vulnerabilities

TinTin++ WinTin++ 1.97.9 - chat Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27660/info TinTin++ and WinTin++ are prone to multiple security vulnerabilities affecting the application's 'chat' functionality. These issues include a buffer-overflow vulnerability, a...

TinTin++ / WinTin++ 1.97.9 - '#chat' Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27660/info TinTin++ and WinTin++ are prone to multiple security vulnerabilities affecting the application's 'chat' functionality. These issues include a buffer-overflow vulnerability, a denial-of-service vulnerability, and a file-overwrite vulnerability...

[waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01

waraxe-2008-SA063 - Information Leakage in Kayako SupportSuite 3.11.01 =============================================================================== Author: Janek Vind "waraxe" Date: 21. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-63.html Target software description...

Cross site scripting

Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...

IBM Lotus Sametime Client Chat消息跨站脚本漏洞

Lotus Sametime是一套企业用的即时通讯应用程序。 Lotus Sametime处理超链接信息存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 提交恶意的超链接在消息中，当用户执行鼠标移动操作就可以触发任意脚本代码执行，导致敏感信息泄漏。 IBM Lotus Sametime 7.5.1 IBM Lotus Sametime 7.5 可参考如下安全公告获得补丁信息： http://www-1.ibm.com/support/docview.wss?uid=swg21292938...

Debian Security Advisory DSA 307-1 (ircii-pana)

The remote host is missing an update to ircii-pana announced via advisory DSA 307-1. OpenVAS Vulnerability Test $Id: deb3071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 307-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1386-1 (wesnoth)

The remote host is missing an update to wesnoth announced via advisory DSA 1386-1. OpenVAS Vulnerability Test $Id: deb13861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1386-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 298-1 (epic4)

The remote host is missing an update to epic4 announced via advisory DSA 298-1. OpenVAS Vulnerability Test $Id: deb2981.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 298-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1386-2 (wesnoth)

The remote host is missing an update to wesnoth announced via advisory DSA 1386-2. OpenVAS Vulnerability Test $Id: deb13862.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1386-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1386-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-306)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-291)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0278

SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a smwindow action...

Sql injection

SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a smwindow action...

CVE-2008-0278

SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a smwindow action...

CVE-2008-0278

CVE-2008-0278: X7 Chat (2.0.5 and possibly earlier) is vulnerable to SQL injection via the day parameter in index.php when page is set to event (sm_window action). The vulnerability allows remote attackers to manipulate database queries, potentially disclosing data, bypassing authentication, or m...