676 matches found
eLms Pro - SQL Injection / Cross-Site Scripting
======================================= eLMS Pro SQLi and XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...
IM Worm Spreading on Yahoo Messenger
A smiley-faced instant message with a photo link posing as if it’s from someone on your buddy list is actually spreading misery worldwide in the form of a worm on Yahoo Instant Messenger: The IM ultimately delivers a worm that allows an attacker to take over the victim’s machine, not to mention...
Miranda IM TLS encryption vulnerability
Under some conditions TLS is not used for Jabber server connection regradless of settings...
Miranda IM TLS MitM Proof Of Concept
!/usr/bin/perl Miranda IM TLS MitM Proof of Concept by Jan Schejbal, 2010-03-19 MAY WORK WITHOUT MODIFICATIONS AGAINST OTHER CLIENTS WITH THIS ISSUE! Generally: Will work if client also accepts unencrypted connections if the server reports that TLS is not supported. Tested only on WinXP SP3 with...
Miranda IM 0.8.16 - Information Disclosure
source: https://www.securityfocus.com/bid/39209/info Miranda IM is prone to an information-disclosure vulnerability. Successful exploits of this issue may allow attackers to perform man-in-the-middle attacks against vulnerable applications and to disclose sensitive information. !/usr/bin/perl...
Miranda IM 0.8.16 - Information Disclosure
Miranda IM 0.8.16 - Information Disclosure source: https://www.securityfocus.com/bid/39209/info Miranda IM is prone to an information-disclosure vulnerability. Successful exploits of this issue may allow attackers to perform man-in-the-middle attacks against vulnerable applications and to disclos...
Miranda IM silent TLS failure
Summary: Under certain conditions, Miranda ignores the "Use TLS" setting in Jabber accounts and uses an unencrypted connection. Affected: Miranda IM instant messenger, at least versions 0.8.16, 0.9.0 alpha build 6 Unicode and SVN rev. 11383 Description: If the following conditions are met: - "Use...
Symantec IM Manager Detection
Symantec IM Manager, used to manage instant messaging traffic, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45017; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...
Symantec IM Manager 8.x < 8.3.14 (SYM10-005 and SYM10-006)
A version of Symantec IM Manager 8.x earlier than 8.3.14 is installed on the remote Windows host. Such versions may be affected by one or both of the following vulnerabilities : - An integer overflow vulnerability in the third-party Autonomy KeyView module can be triggered when parsing a speciall...
CVE-2009-4660
Stack-based buffer overflow in the AntServer Module AntServer.exe in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660...
Stack overflow
Stack-based buffer overflow in the AntServer Module AntServer.exe in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660...
CVE-2009-4660
Stack-based buffer overflow in the AntServer Module AntServer.exe in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660...
CVE-2009-4660
CVE-2009-4660: BigAnt IM Server 2.50 has a stack-based buffer overflow in the AntServer.exe module (AntServer) that lets a remote attacker execute arbitrary code by sending a long GET request to TCP port 6660. Affected: BigAnt IM Server 2.50 (and related references note the BigAnt server family)....
Symantec IM Manager Console Cross Site Scripting Vulnerability
This host is installed with Symantec IM Manager and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodsymantecimmanagerxssvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Symantec IM Manager Console Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright:...
Symantec IM Manager Multiple Vulnerabilities
Binary data 5350.prm...
Symantec IM Manager Console Cross Site Scripting Vulnerability
Symantec IM Manager is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-0423
gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service CPU consumption and application hang by sending many smileys in a 1 IM or 2 chat...
CVE-2010-0423
gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service CPU consumption and application hang by sending many smileys in a 1 IM or 2 chat...
Cross site scripting
Cross-site scripting XSS vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...