Oracle Linux 4 : seamonkey (ELSA-2010-0967)

From Red Hat Security Advisory 2010:0967 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base score...

Oracle Linux 3 / 4 : seamonkey (ELSA-2009-0398)

From Red Hat Security Advisory 2009:0398 : Updated SeaMonkey packages that fix two security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

LINE Chat Client Detection

Binary data 6923.prm...

NSA can eavesdrop traffic in Real Time, more PRISM slides leaked

The NSA surveillance program PRISM story was started with four leaked slides from the Washington Post weeks before and today they has revealed four more annotated slides about the NSA operation, along with detailing the various levels of scrutiny from the FBI and NSA that happen before, during an...

et-chat - Privilege Escalation Arbitrary File Upload

et-chat - Privilege Escalation Arbitrary File Upload source: https://www.securityfocus.com/bid/60660/info et-chat is prone to a privilege-escalation vulnerability and an arbitrary shell-upload vulnerability. An attacker can exploit these issues to gain elevated privileges within the application a...

et-chat - Privilege Escalation / Arbitrary File Upload

source: https://www.securityfocus.com/bid/60660/info et-chat is prone to a privilege-escalation vulnerability and an arbitrary shell-upload vulnerability. An attacker can exploit these issues to gain elevated privileges within the application and upload arbitrary shells; this can result in an...

Et-Chat 3.07 Privilege Escalation / Shell Upload

Exploit Title: Et-chat 3.07 user id Parameter Remote code execution Exploit Author: MR.XpR Script Download : http://et-chat.ir/up/etchatv307.zip Risk : Normal Platforms : PHP Tested on: 7 , KAli , Vista Date : 2013 -====================- How does : This error occurs due to keep cookies Exploit :...

MyBB Ajax Chat SQL Vulnerability

Dork: intitle:MyBB Ajax Chat http://server/chatframe.php?rs=getChats&rsargs=" http://wolf-den.net/forums/chatframe.php?rs=getChats&rsargs=" http://www.cycle-soft.com/forum/chatframe.php?rs=getChats&rsargs=" http://www.forofusion.com/chatframe.php?rs=getChats&rsargs="...

Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=960 Release Date: ============= 2013-05-31 Vulnerability Laboratory ID VL-ID: ====================================...

Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=960 Release Date: ============= 2013-05-31 Vulnerability Laboratory ID VL-ID: ====================================...

Ruby on Rails Exploit Harvests IRC Botnet

Developers who have not updated their Ruby on Rails installations with a five-month-old security patch would do well to secure the Web development framework now. Exploit code has surfaced for CVE-2013-0156 that is being used to build a botnet of compromised servers. Exploit code has been publicly...

Session fixation

functions/htmltotext.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the messagemessagetext parameter to chat/addmessag, which is not properly handled when executing the pregreplace function with the eval switch...

CVE-2012-6554

Summary: CVE-2012-6554 is an arbitrary PHP code execution in the Active Collab Chat Module for versions prior to 1.5.2, exploitable by remote authenticated users via the message[message_text] field in chat/add_messag. The root cause is improper handling during preg_replace with the eval switch, e...

PT-2013-2008

Name of the Vulnerable Software and Affected Versions activeCollab versions prior to 1.5.2 Description The issue allows remote authenticated users to execute arbitrary PHP code via the messagemessage text parameter to "chat/add message". This is due to improper handling when executing the preg...

CVE-2012-6554: Improper Input Validation

functions/htmltotext.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the messagemessagetext parameter to chat/addmessag, which is not properly handled when executing the pregreplace function with the eval switch...

Lan Messenger - sending PM UNICODE Overwrite Buffer Overflow (SEH)

Lan Messenger - sending PM UNICODE Overwrite Buffer Overflow SEH Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip...

Lan Messenger - sending PM 'UNICODE' Overwrite Buffer Overflow (SEH)

Exploit Title: Lan Messenger Version 1.2 Buffer Overflow vulnerability - UNICODEPOC Date: 09-05-2013 Exploit Author: ariarat Vendor Homepage: http://lmadhavan.com Software Link: http://lmadhavan.com/software/archive/lanmsg12.zip Version: 1.2 & may be old versions! Tested on: Windows 7 & windows X...

Command injection

The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat...

PT-2013-2424

Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.5.1 through 8.5.2.1 Description The issue allows remote authenticated users to send commands to individual chat users or to all participants in a chat room via a crafted Sametime Instant Message IM. Recommendations For...

PT-2013-1884 · Apache · Apache Activemq

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions prior to 5.8.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various vectors, including th...