64 matches found
CVE-2016-2087
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. dot dot in the server name...
CVE-2016-2233
Stack-based buffer overflow in the inboundcapls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service crash via a large number of options in a CAP LS message...
CVE-2016-2233
Stack-based buffer overflow in the inboundcapls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service crash via a large number of options in a CAP LS message...
CVE-2016-2087
HexChat 2.11.0 contains a directory traversal vulnerability in the client that allows a remote IRC server to read or modify arbitrary files via a ... in the server name. Multiple connected advisories confirm affected software and fixed/mitigation status: OSV and Debian advisories indicate the iss...
CVE-2016-2233
Stack-based buffer overflow in the inboundcapls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service crash via a large number of options in a CAP LS message...
CVE-2016-2087
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. dot dot in the server name...
Google Image CSRF Vulnerability & Using it as a Botnet
Exploit for php platform in category web applications / Exploit Title: Google Image CSRF Vulnerability & Using it as a Botnet Exploit Author: C4T Vendor Homepage : http://images.google.com Google Dork: none Tested on: Linux & Windows ====================================================== Google...
FBI raids ISP in Anonymous DDoS investigation !
Authorities in the U.S. and Germany have raided Internet Service Providers in hopes of tracking down the hackers who launched distributed denial of service DDoS attacks against Web sites such as Visa.com, PayPal.com, and Mastercard.com earlier this month. In documents posted Wednesday to the...
Code injection
Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate...
DEBIAN-CVE-2009-4016
Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...
CVE-2009-4016
Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...
hybrid and ratbox IRC servers multiple security vulnerabilities
LINKS command, integer overflow, HELP command DoS...
Mandriva Linux Security Advisory : pidgin (MDVSA-2009:321)
Security vulnerabilities has been identified and fixed in pidgin : The NSS plugin in libpurple in Pidgin 2.4.1 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service. CVE-2008-3532 Pidgin 2.4....
Mandrake Security Advisory MDVSA-2009:133 (irssi)
The remote host is missing an update to irssi announced via advisory MDVSA-2009:133. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
[ MDVSA-2009:133 ] irssi
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:133 http://www.mandriva.com/security/ Package : irssi Date : June 16, 2009 Affected: 2008.1, 2009.0, 2009.1, Corporate 3.0 Problem Description: A vulnerability has been found and corrected in irssi: Off-by-o...
Buffer overflow
Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...
CVE-2009-1959
CVE-2009-1959 affects irssi 0.8.13, where an off-by-one error in event_wallops() within fe-common/irc/fe-events.c can be triggered by an empty command sent by a remote IRC server. This leads to a one-byte buffer under-read and a one-byte buffer underflow, resulting in a denial of service (crash)....
Mandriva Update for eggdrop MDKSA-2007:175 (eggdrop)
Check for the Version of eggdrop OpenVAS Vulnerability Test Mandriva Update for eggdrop MDKSA-2007:175 eggdrop Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...