CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

CVE-2007-1502

CVE-2007-1502 affects Rhapsody IRC 0.28b; multiple buffer overflow paths allow remote code execution via long arguments across commands (connect, server, nick, ctcp/chat/notice/msg, query). The connected sources corroborate a set of six or more long-argument vectors (1) command, (2) server argume...

Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability

Rhapsody IRC 0.28b NICK Multiple fs and bof vulnerability Description: Rhapsody is a text console IRC client for Unix operating systems. It is small, fast, portable, easy to use and full featured. An intuitive menu-driven user interface makes rhapsody ideal for beginner to intermediate users. Fou...

Rhapsody IRC client multiplesecurity vulnerabilities

Multiple buffer overflows and formatstring vulnerabilities...

FiSH IRC clients encryption plugin multiple security vulnerabilities

Multiple buffer overflows on different IRC messages...

tyger-sqlxss.txt

-=--------------------ADVISORY-------------------=- Tyger Bug Tracking System Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Tyger Bug Tracking System -=+ Version: 1.1.3 -=+ Vendor's URL: http://uk.homeunix.org/tyger/cms/ -=+ Platform:...

FiSH-irssi - Multiple Remote Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/22880/info FiSH is prone to multiple remote buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit these issues to execute arbitrary...

GLSA-200701-26 : KSirc: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200701-26 KSirc: Denial of Service vulnerability KSirc fails to check the size of an incoming PRIVMSG string sent from an IRC server during the connection process. Impact : A malicious IRC server could send a long PRIVMSG string t...

flashChat 4.7.8 Cross Site Scripting Vulnerability

/ Flashchat 4.7.8 / Date of written Advisory: February 04, 2007 Product: Flash Chat = 4.7.8 Vendor: http://tufat.com/ Description: flashChat is a highly customizable PHP/MySQL based chat room script that is easily integrated into a website and mimics IRC in it's command structure Exploits /...

KSirc: Denial of Service vulnerability

Background KSirc is the default KDE IRC client. Description KSirc fails to check the size of an incoming PRIVMSG string sent from an IRC server during the connection process. Impact A malicious IRC server could send a long PRIVMSG string to the KSirc client causing an assertion failure and the...

MOAB-16-01-2007: Multiple Colloquy IRC Format String Vulnerabilities

Summary Traditionally, chat clients on the Mac have been anything but glamorous. Colloquy is an advanced IRC & SILC client which aims to fill this void. By adhering to Mac OS X interface conventions, Colloquy has the look and feel of a quality Mac application. By making a common mistake the...

Colloquy IRC client multiple format string vulnerabilities

Multiple format string vulnerabilities, e.g. invite IRC command...

MOAB-16-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick = "spongebo" channeljoined = false readytogo = false...

Colloquy <= 2.1.3545 (INVITE) Format String Denial of Service Exploit

No description provided by source. !/usr/bin/ruby c Copyright 2006 Lance M. Havok [email protected] Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick =...

Fedora Core 5 : mozilla-1.7.13-1.1.fc5 (2006-487)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs...

Colloquy 2.1.3545 - INVITE Format String Denial of Service

Colloquy 2.1.3545 - INVITE Format String Denial of Service !/usr/bin/ruby c Copyright 2006 Lance M. Havok Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick...

Colloquy 2.1.3545 - 'INVITE' Format String Denial of Service

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick = "spongebo" channeljoined = false readytogo = false...

USN-409-1: ksirc vulnerability

Federico L. Bossi Bonin discovered a Denial of Service vulnerability in ksirc. By sending a special response packet, a malicious IRC server could crash ksirc...

KGB 1.9 - 'sesskglogadmin.php' Local File Inclusion

? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:...

Unfixed XSS vulnerability at www.germany-irc.eu

Security researcher iD - uNkn0wn.eu, has submitted on 01/10/2007 a cross-site-scripting XSS vulnerability affecting www.germany-irc.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...