Solaris 10 (sparc) : 143317-03

GNOME 2.6.0: Instant Messaging patch. Date this patch was last updated by Sun : Nov/30/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

im-sexy.fr XSS vulnerability

Open Bug Bounty ID: OBB-568008 Description| Value ---|--- Affected Website:| im-sexy.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kinderaerzte-im-netz.at XSS vulnerability

Open Bug Bounty ID: OBB-440354 Description| Value ---|--- Affected Website:| kinderaerzte-im-netz.at Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

wohnen-im-alter.de XSS vulnerability

Open Bug Bounty ID: OBB-327701 Description| Value ---|--- Affected Website:| wohnen-im-alter.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

frauenaerzte-im-netz.de XSS vulnerability

Open Bug Bounty ID: OBB-323011 Description| Value ---|--- Affected Website:| frauenaerzte-im-netz.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

UBUNTU-CVE-2017-14650

A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...

CVE-2017-14650

CVE-2017-14650 affects Horde_Image (Im backend) using ImageMagick convert; root cause is missing input validation of the index field in _raw() when building the ImageMagick command. Affected are Horde_Image versions 2.0.0 through 2.5.1; fixed in 2.5.2. The vulnerability is contextual: it is not r...

im-web.com.de XSS vulnerability

Vulnerable URL: http://im-web.com.de/mail.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 636909 VIP website status:| No Check im-web.com.de SSL connection:| Grade: F Coordinate...

gib-acht-im-verkehr.de XSS vulnerability

Open Bug Bounty ID: OBB-279399 Description| Value ---|--- Affected Website:| gib-acht-im-verkehr.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Skype - free IM & video calls - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Skype - free IM & video calls published at the 'play' market has multiple vulnerabilities...

wohnen-im-alter.de XSS vulnerability

Vulnerable URL: https://www.wohnen-im-alter.de/staedteauswahl.html?q=test%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E%5Bcity%5D=test%22 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:53 GMT Vulnerability type:| XSS...

frauenaerzte-im-netz.de XSS vulnerability

Vulnerable URL: https://www.frauenaerzte-im-netz.de/page.php?site=de=suche=651=%22%3Eblub%3CsvG%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Code Execution Vulnerability Found in Libpurple IM Library

A severe vulnerability has been disclosed in libpurple, the library used in the development of a number of popular instant messaging clients, including Pidgin and Adium for the macOS platform. Adium 1.5.10.2 is vulnerable and can be exploited to run arbitrary code remotely. A researcher who goes ...

Cisco Unified Communications Manager IM and Presence Service Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability

Cisco Unified Communications Manager IM and Presence Service is prone to a vulnerability in Apache Struts2. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2016-6464

CVE-2016-6464 affects Cisco Unified Communications Manager IM and Presence Service web management interface. An unauthenticated, remote attacker could view restricted web pages due to lack of proper HTTP header input validation. Affects at least 11.5(1); fixed in 11.5(1.12000.2) and 12.0(0.98000....

CVE-2016-1466

Cisco Unified Communications Manager IM and Presence Service 9.11 SU6, 9.11 SU6a, 9.11 SU7, 10.52 SU2, 10.52 SU2a, 11.01 SU1, and 11.51 allows remote attackers to cause a denial of service sipd process restart via crafted headers in a SIP packet, aka Bug ID CSCva39072...

CVE-2016-1466

CVE-2016-1466 affects Cisco Unified Communications Manager IM and Presence Service (versions 9.1(1) SU6, SU6a, SU7; 10.5(2) SU2, SU2a; 11.0(1) SU1; 11.5(1)) where the SIP Proxy Daemon (sipd) can be forced to restart, causing a denial of service via crafted SIP headers. The root cause, per Cisco a...

Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

Cisco Unified Communications Manager is a call-processing component of a unified communications system.Cisco Unified Communications Manager IM and Presence Service is a CUCM-based platform for instant messaging IM and status display. A denial of service vulnerability exists in Cisco Unified...

Philips Xper-IM Connect Vulnerabilities

OVERVIEW Independent researchers Mike Ahmadi of Synopsys and Billy Rios of Whitescope LLC, in collaboration with Philips, have identified numerous vulnerabilities with an automated software composition analysis tool in the Philips Xper-IM Connect system running on Windows XP. Philips reports that...

Slack: File upload over private IM channel

A team member can upload the files in the private IM chat channel of other members.This can be done by using the IM channel id. Please refer to the attached POC's. Let me know if any more details are needed...