Active Collab "chat module" Remote PHP Code Injection Exploit

This module exploits an arbitrary code injection vulnerability in the chat module that is part of Active Collab versions 2.3.8 and earlier by abusing a pregreplace using the /e modifier and its replacement string using double quotes. The vulnerable function can be found in...

Active Collab "chat module" 2.3.8 Remote PHP Code Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Active Collab "chat module" %q This...

Active Collab "chat module" <= 2.3.8 Remote PHP Code Injection Exploit

Exploit for php platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' cla...

Pidgin OTR Plugin Detection

The remote host has the Pidgin OTR Off-the-Record plugin installed. This plugin allows for secure, encrypted communication between parties using the Pidgin instant messaging software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59194; scriptversion"1.8";...

X7 Chat 2.0.5.1 and below version CSRF add Administrator the defect and repair-vulnerability warning-the black bar safety net

Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Key words: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Author: DennSpec download address: http://x7chat.com/releases/v2/x7chat2051.zip Affected versions: = 2.0.5.1 First register for a username frame.html in the path of your main html page html bod...

X7 Chat 2.0.5.1 CSRF Add Admin Exploit

Exploit for php platform in category web applications Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace...

X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin)

X7 Chat 2.0.5.1 - Cross-Site Request Forgery Add Admin Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace...

X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin)

Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace http://xxxxxxxxx.com/x7path/ to your target url. Dont forget replace...

X7 Chat 2.0.5.1 Cross Site Request Forgery

Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace http://xxxxxxxxx.com/x7path/ to your target url. Dont forget replace...

ChatBlazer Flash Chat Cross Site Scripting

Exploit Title: ChatBlazer Flash Chat Cross Site Scripting Date: 19.04.2012 Author: Sony Software Link: www.chatblazer.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/04/chatblazer-flash-chat-cross-site.html...

Seditio Chat 1.0 Cross Site Request Forgery

========================================================= Vulnerable Software: Seditio Chat Plugin Chat İndex Plugin v 1.0 http://www.seditio-eklenti.com/page.php?id=418 http://www.seditio-eklenti.com/chat-plugin-index-d418.html Downloaded: http://www.seditio-eklenti.com/datas/users/1-chat.rar MD...

Nimbuzz 2.2.0 Cross Site Scripting

Exploit Title: Nimbuzz 2.2.0 Cross Site Scripting Date: 09.04.2012 Author: Sony Software Link: http://www.nimbuzz.com/en/get/voip-and-chat-on-pc/pc-client-downloaded Software Version: 2.2.0 Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com...

Linux Gather XChat Enumeration

This module will collect XChat's config files and chat logs from the victim's machine. There are three actions you may choose: CONFIGS, CHATS, and ALL. The CONFIGS option can be used to collect information such as channel settings, channel/server passwords, etc. The CHATS option will simply...

OS X Gather Colloquy Enumeration

This module will collect Colloquy's info plist file and chat logs from the victim's machine. There are three actions you may choose: INFO, CHATS, and ALL. Please note that the CHAT action may take a long time depending on the victim machine, therefore we suggest to set the regex 'PATTERN' option ...

Skype 5.8x / 5.5x Corruption

Title: ====== Skype 5.8x 5.5x - Corruption & Persistent Vulnerability Date: ===== 2012-03-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=455 MRSC ID: 12250 VIDEO: http://vulnerability-lab.com/getcontent.php?id=457 ; VL-ID: ===== 455 Introduction: ============= Skype...

vBulletin vBShout 6.0.5 Cross Site Scripting

Title: vBulletin vBShout Module &username=&hours=&frommonth=0&fromday=&fromyear =0&endmonth=0&endday=&endyear=0&chatroomid=0&orderby=DESC&perpage=5&s=&do=archive&instanceid=1 http://www.site.com/vbshout.php?message="&s=&do=archive&instanceid=1 vBShout is the ideal way to keep members on your foru...

Pidgin < 2.10.2 Multiple DoS

The version of Pidgin installed on the remote host is earlier than 2.10.2 and is potentially affected by the following issues : - A denial of service vulnerability NULL pointer dereference in the 'pidginconvchatrenameuser' function in 'gtkconv.c'. Remote attackers can trigger the vulnerability by...

OS X Gather Adium Enumeration

This module will collect Adium's account plist files and chat logs from the victim's machine. There are three different actions you may choose: ACCOUNTS, CHATS, and ALL. Note that to use the 'CHATS' action, make sure you set the regex 'PATTERN' option in order to look for certain log names which...

DEBIAN-CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...