2518 matches found
Yelp: Leaking sensitive information lead to compromise employer API keys
The configuration file of an internal IRC bot which included credentials to internal services and some external services used by Yelp developers was inadvertently included by an employee in a personal public GitHub repository. The repository was taken down and the affected credentials rotated...
[SECURITY] Fedora 25 Update: irssi-1.0.4-1.fc25
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
[SECURITY] Fedora 25 Update: seamonkey-2.48-1.fc25
SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...
[SECURITY] Fedora 26 Update: seamonkey-2.48-1.fc26
SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...
CowerSnail, from the creators of SambaCry
We recently reported about SambaCry, a new family of Linux Trojans exploiting a vulnerability in the Samba protocol. A week later, Kaspersky Lab analysts managed to detect a malicious program for Windows that was apparently created by the same group responsible for SambaCry. It was the common C&C...
[SECURITY] Fedora 26 Update: irssi-1.0.4-1.fc26
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
[SECURITY] Fedora 25 Update: irssi-1.0.3-1.fc25
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
[SECURITY] Fedora 26 Update: irssi-1.0.3-1.fc26
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
Updated weechat packages fix security vulnerability
It was discovered that weechat is prone to a buffer overflow vulnerability in the IRC plugin, allowing a remote attacker to cause a denial-of-service by sending a specially crafted filename via DCC CVE-2017-8073...
Debian DSA-3885-1 : irssi - security update
Multiple vulnerabilities have been discovered in Irssi, a terminal based IRC client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2017-9468 Joseph Bisch discovered that Irssi does not properly handle DCC messages without source nick/host. A malicious...
irc.emcp.com XSS vulnerability
Vulnerable URL: http://irc.emcp.com/index.php?titleID=2896=1/-///'/"//--...
Debian Security Advisory DSA 3885-1 (irssi - security update)
Multiple vulnerabilities have been discovered in Irssi, a terminal based IRC client. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2017-9468 Joseph Bisch discovered that Irssi does not properly handle DCC messages without source nick/host. A malicious IRC...
Alio Applicant Portal 6.0 SQL Injection
| \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | | | / / | | | | | |/ / | | | | \ V / | | | . | --. \ | | | | | |...
Parrot Sec: XSS on http://irc.parrotsec.org
@lalka discovered a XSS on http://irc.parrotsec.org , sub domains are out of scope but this report was submitted prior to policy change regarding sub domains submissions...
CGI:IRC irc.cgi file cross-site scripting vulnerability
CGI:IRC is a Perl/CGI program that enables users to access IRC from a Web browser. A cross-site scripting vulnerability exists in the irc.cgi file in versions of CGI:IRC prior to 0.5.12. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...
CVE-2017-9469
An out-of-bound heap read was found in irssi's getfileparamscount function, during the parsing of a DCC SEND request. An IRC client connected to the same IRC network as the target could send a specially crafted request that would force irssi to read 1 byte outside of an allocated string, which...
CVE-2017-9468
A null pointer dereference was found in the way irssi handles DCC messages that do not contain a source nick/host. A malicious IRC server could be used to crash an irssi client by sending a specially crafted DCC message...
CVE-2017-9468
In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash...
