2779 matches found
cve-2010-2075-analysis
CVE-2010-2075 – UnrealIRCd Backdoor Remote Code Execution Overview This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1. The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the...
CVE-2026-49097
camel-irc irc.sendTo Header Injection Reproducer CVE-2026-49097 This project demonstrates a message-header injection in Apache Camel's camel-irc component, tracked as CVE-2026-49097. IrcProducer reads the irc.sendTo header to choose the destination of the outgoing IRC message; when present it...
unrealircd-backdoor-pentest-report
🛡️ UnrealIRCd Backdoor Penetration Test A controlled penetration testing project focused on identifying, exploiting, and remediating the UnrealIRCd 3.2.8.1 backdoor CVE-2010-2075 in an isolated training environment. Disclaimer: This project was conducted strictly for educational and authorized...
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075 Usage usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...
mIRC-CVE-2019-6453
CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Link to the write-up We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument...
[SECURITY] [DSA 6511-1] znc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6511-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 23, 2026 https://www.debian.org/security/faq -...
Debian dsa-6511 : znc - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6511 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6511-1 [email protected] https://www.debian.org/securit...
[SECURITY] Fedora 44 Update: znc-1.10.3-1.fc44
ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...
UnrealIRCd: Denial of service
Background UnrealIRCd is an Internet Relay Chat IRC daemon. Description A vulnerability has been discovered in UnrealIRCd. Please review the CVE identifier referenced below for details. Impact An attacker may be able to achieve denial of service. Workaround There is no known workaround at this...
GLSA-202608-25 : UnrealIRCd: Denial of service
The remote host is affected by the vulnerability described in GLSA-202608-25 UnrealIRCd: Denial of service A vulnerability has been discovered in UnrealIRCd. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gent...
Improper Input Validation
Apache Camel IRC component is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of IRC control headers, where attacker-controlled irc. headers from untrusted HTTP requests can override the intended message destination, allowing unauthorized message...
FreeBSD : Weechat -- Multiple vulnerabilities (0d5b4884-8c2b-11f1-8144-8447094a420f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0d5b4884-8c2b-11f1-8144-8447094a420f advisory. The Weechat project reports: Use-after-free and double free when a remote relay sends an event with an...
Apache Camel IrcProducer Data Compromise
The vulnerability of the IrcProducer class in the camel-irc component of the Apache Camel framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality and integrity of th...
org.apache.camel.quarkus:camel-quarkus-irc (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-irc-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.19.0, <=4.20.0)
org.apache.camel:camel-irc MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49097 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17875077...
org.apache.camel.karaf:camel-irc (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-irc (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.15.0, <=4.18.2)
org.apache.camel:camel-irc MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49097 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17875077...
org.apache.camel.karaf:camel-irc (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-irc (>=3.2.0, <=3.13.0) +3 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.0.0, <=4.14.7)
org.apache.camel:camel-irc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49097 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17875077...
org.apache.camel.karaf:camel-irc (>=4.18.1, <=4.18.2), org.apache.camel.quarkus:camel-quarkus-irc (>=3.29.0, <=3.33.1) +2 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.15.0, <=4.18.2)
org.apache.camel:camel-irc MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-49097 Source advisory: GHSA-463M-2HR2-Q2J7...
org.apache.camel.quarkus:camel-quarkus-irc (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-irc-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.19.0, <=4.20.0)
org.apache.camel:camel-irc MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-49097 Source advisory: GHSA-463M-2HR2-Q2J7...
org.apache.camel.karaf:camel-irc (>=4.7.0, <=4.14.7), org.apache.camel.quarkus:camel-quarkus-integration-test-irc (>=3.2.0, <=3.13.0) +3 more potentially affected by CVE-2026-49097 via org.apache.camel:camel-irc (>=4.0.0, <=4.14.7)
org.apache.camel:camel-irc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-49097 Source advisory: GHSA-463M-2HR2-Q2J7...
GHSA-463M-2HR2-Q2J7 Apache Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter
Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...