7765 matches found
efriends.txt
AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...
CVE-2005-2956
ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files...
CVE-2005-2956
ATutor 1.5.1 (and possibly earlier) stores temporary chat logs under the web document root with insufficient access control and predictable filenames, allowing remote attackers to obtain user chat conversations via direct requests to those files. This CVE entry contains the core detail; no exploi...
CVE-2005-2956
ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files...
ATutor 1.5.1 - Chat Logs Remote Information Disclosure
ATutor 1.5.1 - Chat Logs Remote Information Disclosure source: https://www.securityfocus.com/bid/14832/info ATutor is prone to a remote information disclosure vulnerability. This issue is due to a failure in the application to perform proper access validation before granting access to privileged...
ATutor 1.5.1 - Chat Logs Remote Information Disclosure
source: https://www.securityfocus.com/bid/14832/info ATutor is prone to a remote information disclosure vulnerability. This issue is due to a failure in the application to perform proper access validation before granting access to privileged information. A remote attacker can exploit this...
Denial of service vulnerability in X-Chat for Windows from Silverex.org
Critical Security research group found a denial of service vulnerability in X-Chat for Windows from Silverex.org. Vulnerable versions: 2.4.5-1 and prior. Vulnerable code: define MAXLINE 300 for x = 2; wordx0 != '0'; ++x strncatinfo, wordx, MAXLINE; strncatinfo, " ", MAXLINE; Proof of concept: Pla...
Mercora IMRadio Detection
Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. Josh Zlatin-Amishav GPLv2 include"compat.inc"; if description...
ZipTorrent1.3.7.3.txt
/================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application: -------------------- ZipTorrent 1.3.7.3 and...
CVE-2004-2467
CVE-2004-2467 affects Easy Chat Server 1.2 (component: chat.ghp). The description from CVE records states that remote attackers can add a large number of fake users, eventually causing a denial of service (server crash). The connected documents corroborate this description across NVD and CVE list...
CVE-2004-2467
chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service server crash...
CVE-2004-2465
Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...
CVE-2004-2466
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...
CVE-2004-2466
CVE-2004-2466 affects Easy Chat Server. Public material shows a remote buffer overflow in the username/authentication handling that can crash the server (denial of service). Historical details reference v1.2 and later reports indicate v2.2 is affected; multiple exploit chains exist for Easy Chat ...
CVE-2004-2465
CVE-2004-2465 describes an XSS vulnerability in Easy Chat Server 1.2, specifically in the chat.ghp component, where the username parameter can be exploited to inject arbitrary web script or HTML. The NVD entry notes a network-exposed vulnerability with no confidentiality impact, partial integrity...
CVE-2005-2376
Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via a long 1 nickname or 2 chat message...
CVE-2005-2375
Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a 1 nickname or 2 chat message...
galeon, mozilla security update
CentOS Errata and Security Advisory CESA-2005:587-01 Updated mozilla packages that fix various security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgro...
Broadcast format string and buffer-overflow in Race Driver 1.20
Luigi Auriemma Application: Race Driver http://www.codemasters.com/tocaracedriver/ Versions: = 1.20 Platforms: Windows Bugs: A broadcast format string B broadcast buffer-overflow Exploitation: remote, versus any user in the public chat or through malformed server replies broadcast Date: 18 Jul 20...