WP-Eggdrop <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The WP-Eggdrop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

PT-2024-22960 · WordPress · Wp-Eggdrop

Name of the Vulnerable Software and Affected Versions: WP-Eggdrop plugin for WordPress versions up to, and including, 0.1 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated...

PT-2024-22963 · WordPress · Wp-Eggdrop

Name of the Vulnerable Software and Affected Versions: WP-Eggdrop plugin for WordPress versions up to, and including, 0.1 Description: The issue is related to a Cross-Site Request Forgery vulnerability due to missing or incorrect nonce validation in the wpegg updateOptions function. This allows...

CVE-2020-29576

The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...

CVE-2020-29576

The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...

Default credentials

The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...

CVE-2020-29576

The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...

CVE-2020-29576

The CVE-2020-29576 entry concerns the Eggdrop Docker images prior to 1.8.4rc2, where the root account is configured with a blank password. This allows a remote attacker, without authentication, to obtain root access on systems running the affected Eggdrop Docker container. Documents consistently ...

Eggdrop Docker images Security Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

Debian DSA-1826-1 : eggdrop - several vulnerabilities

Several vulnerabilities have been discovered in eggdrop, an advanced IRC robot. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2807 It was discovered that eggdrop is vulnerable to a buffer overflow, which could result in a remote user executing...

Mandriva Security Advisory MDVSA-2009:126-1 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:126-1 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126-1. OpenVAS Vulnerability Test $Id: mdksa20091261.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:126-1 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009...

Debian: Security Advisory (DSA-1826-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1826-1 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory DSA 1826-1. OpenVAS Vulnerability Test $Id: deb18261.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1826-1 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Eggdrop servmsg.c远程拒绝服务漏洞

BUGTRAQ ID: 34985 CVECAN ID: CVE-2009-1789 Eggdrop是一款用C语言编写的开源IRC bot。 Eggdrop的Server模块（/mod/server.mod/servrmsg.c）中没有正确地处理用户所发送的私人消息。如果ctcpbuf 为“""”的话，消息中最后一个参数为负数，这可能导致服务器崩溃。成功利用这个漏洞要求攻击者能够连接到Eggdrop所在的IRC网络。 Eggheads Eggdrop IRC bot 1.6.19 厂商补丁： Eggheads --------...

Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability

Eggdrop Server Module is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected...

Eggdrop < 1.6.19 Server Module Message Handling Remote Buffer Overflow Vulnerability

Eggdrop Server Module is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

[SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1826-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 04, 2009 http://www.debian.org/security/faq -...

Fedora Core 9 FEDORA-2009-5568 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory FEDORA-2009-5568. OpenVAS Vulnerability Test $Id: fcore20095568.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5568 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009...

FreeBSD Ports: eggdrop

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...