XOOPS modules/pm/readpmsg.php页面跨站脚本漏洞

BUGTRAQ ID: 37594 Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。 Xoops没有正确地过滤提交给modules/pm/readpmsg.php页面的op参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。成功攻击要求安装了Private Messaging模块。 Xoops 2.x 厂商补丁： Xoops ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CentOS 5 : dbus (CESA-2008:0159)

Updated dbus packages that fix an issue with circumventing the security policy are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between applications. It is used both for the system-wide...

BigAnt Server 2.52 USV Buffer Overflow

This exploits a stack buffer overflow in the BigAnt Messaging Service, part of the BigAnt Server product suite. This module was tested successfully against version 2.52. NOTE: The AntServer service does not restart, you only get one shot. This module requires Metasploit:...

Security Best Practice: Blocking Yahoo! Messenger

Instant Messaging applications allow communication and collaboration between Internet users using various modes of communication, including instant messages exchange, voice and video, application sharing, white board, file transfer and remote assistance.Yahoo! Messenger is an...

Security Best Practice: Blocking ICQ

Instant Messaging applications allow communication and collaboration between Internet users using various modes of communication, including instant messages exchange, voice and video, application sharing, white board, file transfer and remote assistance.ICQ is a popular instant messaging computer...

Pidgin MSN MSNP2P Message Integer Overflow (CVE-2008-2927)

Pidgin is a multi-protocol, multi-platform instant messaging client. The product supports numerous protocols such as AIM and ICQ, MSN and Yahoo!. Pidgin allows one user to log into multiple accounts on multiple IM networks simultaneously. There exists an integer overflow vulnerability in Pidgin...

Barracuda IM Firewall Detection (HTTP)

This host is running Barracuda IM Firewall. Barracuda IM Firewall control and manage internal and external instant messaging IM traffic. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Barracuda IM Firewall Detection

This host is running Barracuda IM Firewall. Barracuda IM Firewall control and manage internal and external instant messaging IM traffic. OpenVAS Vulnerability Test $Id: barracudaimfirewalldetect.nasl 7268 2017-09-26 08:43:43Z cfischer $ Barracuda IM Firewall Detection Authors: Michael Meyer...

Barracuda IMFirewall 620 Vulnerability

Exploit for unknown platform in category web applications ====================================== Barracuda IMFirewall 620 Vulnerability ====================================== PenTest Information: ==================== GESEC Team remove discover multiple Input Validation Vulnerabilities on Barracud...

Barracuda IMFirewall 620 Vulnerability

No description provided by source. PenTest Information: ==================== GESEC Team remove discover multiple Input Validation Vulnerabilities on Barracuda IM Firewall. A remote attacker is able to get sensitive customer sessions client-sideor can implement evil script routines & malicious...

Low: Red Hat Enhancement Advisory: Red Hat Enterprise MRG Messaging and Grid Version 1.2

Red Hat Enterprise MRG Messaging and Grid Update 1.2 is now available for Red Hat Enterprise Linux 5. This new release includes updated classads, condor, condor-ec2-enhanced, condor-ec2-enhanced-hooks, condor-job-hooks, condor-low-latency, condor-remote-configuration, python-qpid, qpid-java, qpid...

BigAnt Server 2.50 SP1 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BigAnt Serve...

IBM Lotus Sametime Server Multiplexer Stack Buffer Overflow (CVE-2008-2499)

IBM Lotus Sametime is an enterprise instant messaging and web conferencing application created by the Lotus Software division of IBM. Lotus Sametime provides enterprise instant messaging functionality, presence information, and web conferencing using standard protocols. The Lotus Sametime server...

RedHat Security Advisory RHSA-2009:1536

The remote host is missing updates announced in advisory RHSA-2009:1536. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for Communication in Realtime OSCAR protocol is used by the AOL ICQ and...

RedHat Security Advisory RHSA-2009:1536

The remote host is missing updates announced in advisory RHSA-2009:1536. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for Communication in Realtime OSCAR protocol is used by the AOL ICQ and...

RedHat Security Advisory RHSA-2009:1535

The remote host is missing updates announced in advisory RHSA-2009:1535. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol...

Cerulean Studios Trillian Image Filename XML Tag Stack Buffer Overflow (CVE-2008-5401)

Cerulean Studios' Trillian is an instant messaging IM client application that can interact with various IM protocols such as MSN, AIM, ICQ, YAHOO, etc. There exists a stack buffer overflow vulnerability in Trillian instant messenger client application. The vulnerability is due to a boundary error...

RedHat Security Advisory RHSA-2009:1535

The remote host is missing updates announced in advisory RHSA-2009:1535. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol...

Microsoft Windows Kernel GDI Data Validation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. This issue affects the Graphics Device Interface GDI. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result ...

New pidgin packages fix arbitrary code execution

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1932-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 08, 2009...