Ebuddy Web Messenger Disclosure / CSRF Vulnerabilities

Ebuddy Web Messenger suffers from index disclosure, cross site request forgery, htaccess file disclosure, and insecure credential transport vulnerabilities...

eBuddy.com Cross Site Scripting

Date: 07.04.2012 Author: Sony Web Browser : Mozilla Firefox Sony Blog: http://st2tea.blogspot.com...

XSS Ebuddy (responsible disclosure)

Early this morning, the security group Virtual Luminous published a vulnerability in 'Ebuddy Web Messenger' and we would like to inform you that this vulnerability had been discovered and reported to the vendor on June 5th, 2011 by DcLabs Security Research Group. In the report below you are going...

Persistent XSS vulnerability in eBuddy Web Messenger

Persistent XSS vulnerability in eBuddy Web Messenger A team member from Virtual Luminous Security , Russian Federation, has discovered a persistent XSS vulnerability in eBuddy the biggest web IM solution in the world by transmitting messages with embedded encoded javascript code. In-depth detail...

Persistent XSS vulnerability in eBuddy Web Messenger

Persistent XSS vulnerability in eBuddy Web Messenger A team member from Virtual Luminous Security, Russian Federation, has discovered a persistent XSS vulnerability in eBuddy the biggest web IM solution in the world by transmitting messages with embedded encoded javascript code. In-depth detail...

eBuddy Web Messenger Cross Site Scripting

\ \ / / | | | | \ \ / / | || '|| || | | | / || | \ V / | || | | | | || || | || | / |||| | ,| ,||| | | | | | | | || ' \ | || ' \ / \ | | | |/ | | || || || | | | | || || | | || || || |\ \ ||,||| || |||||| || / ,||/ warv0x, krypt0n, Russian Fedration, sol@riss0lar, yoadee P.S: Shoutout to...

Unfixed XSS vulnerability at brisbane.ebuddy.com

Security researcher sl4xUz, has submitted on 10/01/2009 a cross-site-scripting XSS vulnerability affecting brisbane.ebuddy.com, which at the time of submission ranked 687 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. It is current...