CVE-2007-4399: Undefined Security Weakness

CRLF injection vulnerability in the xmms.bx 1.0 script for BitchX allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4400: Undefined Security Weakness

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4401: Undefined Security Weakness

Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4397: Undefined Security Weakness

Multiple CRLF injection vulnerabilities in 1 xmms-thing 1.0, 2 XMMS Remote Control Script 1.07, 3 Disrok 1.0, 4 a2x 0.0.1, 5 Another xmms-info script 1.0, 6 XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF...

Multiple IRC NowPlaying scripts command injection

It's possible to inject IRC command thorugh unfiltered song titile...

ircu IRC server multiple security vulnerabilities

Multiple DoS conditions, channels hijacking, information leakage...

Vulnerability in multiple "now playing" scripts for various IRC clients

In October 2006 I discovered many "now playing" scripts for various IRC clients allow an attacker to send commands to the IRC server on behalf of the user. Details ======= Many scripts for various IRC clients, that report the name of the currently playing song in a media player on IRC share the...

pbd-rfi.txt

// Exploit Name: Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability //Script Homepage: http://phpbluedragon.pl/ // Autor: Kacper [email protected] // Autor Homepage: devilteam.eu | kacper.bblog.pl //Pozdrawiam wszystkich ludzi z DEVIL TEAM, Zapraszam na irc! //Irc: irc.milw0rm.com:66...

gastebuch-rfi.txt

Gästebuch Version 1.5 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Gästebuch Version Version : 1.5 Site : http://www.mapos-scripts.de/downloads.php?download=11 Founder : Rizgar Contact : [email protected] and...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2007:0722)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

[SECURITY] Fedora 7 Update: seamonkey-1.1.3-1.fc7

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

seamonkey security update

CentOS Errata and Security Advisory CESA-2007:0722-01 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

[SECURITY] Fedora 7 Update: centericq-4.21.0-13.fc7

Centericq is a text mode menu- and window-driven IM interface that supports the ICQ2000, Yahoo!, AIM, MSN, IRC and Jabber protocols...

Heap overflow

Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...

CVE-2007-3837

Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...

CVE-2007-3837

Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...

CVE-2007-3837: Undefined Security Weakness

Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...

squirrel-exec.txt

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...

SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln

No description provided by source. SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t...

Visual IRC Join命令响应远程栈溢出漏洞

BUGTRAQ ID: 24798 Visual IRC（ViRC）是一个聊天客户端软件，可以进行仿真的语音聊天和图象传输。 Visual IRC在处理服务器回应数据时存在缓冲区溢出漏洞，远程恶意IRC服务器可能利用此漏洞控制用户机器。 如果Visual IRC用户受骗连接到了恶意的IRC服务器的话，则客户端在处理服务器所发送的超长JOIN命令响应时可能会触发栈溢出，导致执行任意指令。 Jesse McGrew Visual IRC 2.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.visualirc.net/...