CVE-2007-0868

Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...

CVE-2007-0814

Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...

CVE-2007-0814

CVE-2007-0814 affects Adrenalin's ASP Chat, where multiple XSS flaws exist in the chat input path: (1) via the psuedo (pseudo) field and (2) during chat. The root cause is improper input sanitization, enabling remote script/HTML injection. The CVSS base score is 4.3 (Medium) with no exploitation ...

CVE-2007-0814

Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...

Adrenalin's ASP Chat XSS

Adrenalin's ASP Chat XSS By : sn0oPy Risk : high exploit : just inject any script at your psuedo or on chat, to apply it for all the users connected Dork : intitle:"ASP Chat" contact : [email protected] greetz : subzero, http://forums.avenir-geopolitique.net. reference :...

Yahoo Messanger crossaplication scripting

Chat sign in / sign out messages are shown with Internet Explorer allowing scripting in local computer zone...

Hacking tricks of teach you make a simple QQ bomb-vulnerability warning-the black bar safety net

Today for everyone to talk about a simple production of the QQ bomb regard, absolutely everyone with a look of schooling would! The first method is the use of compressed packets, the method I used to teach my sister used that method and play with her classmate, first of all, we first create a...

Fedora Core 5 : mozilla-1.7.13-1.1.fc5 (2006-487)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive files under the web root with insufficient access control, enabling remote download of (at least) ServerKey.pem and AcceptIP.txt via direct requests. Root cause: improper access restrictions exposing sensitive files. No explicit exploitation details are provi...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

CVE-2006-6890

Voodoo chat 1.0RC1b stores passwords under the web root with insufficient access control, enabling remote retrieval of passwords via a direct request to data/users.dat. Affected component: the chat application’s data storage file (data/users.dat) exposed at web root. Root cause: inadequate access...

3APA3A : Hacking into HTML chats for one more time

More about HTML chat hacks one. PART ONE, or we show our own. The interface of almost any chat is based on dynamically generated HTML forms interconnected via javascript. In almost all chats, the username and password or some identifier that is generated when the user logs in is stored inside the...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

Voodoo chat 1.0RC1b Password Disclosure Vulnerability

Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, Shizoe +Exploit:...

Voodoo chat 1.0RC1b (users.dat) Password Disclosure Vulnerability

No description provided by source. Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke,...

Voodoo chat 1.0RC1b - users.dat Password Disclosure

Voodoo chat 1.0RC1b - users.dat Password Disclosure Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com...