EUVD-2019-18516

Malware in sbrugna...

Code injection

Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.0 and before 2.3.0 there was a set of vulnerabilities causing inadequate encryption strength. Part of the secret identity key was disclosed by the fingerprint used for connectio...

MSN Messenger < 6.2.0205 PNG File Remote Overflow (deprecated)

Binary data 2603.prm...

Gadu-Gadu 6.0 - URL Parser JavaScript Cross-Site Scripting

source: https://www.securityfocus.com/bid/11998/info Multiple remote vulnerabilities reportedly affect Gadu-Gadu instant messenger. It supports the DCC Direct Client Connection protocol, facilitating the transfer of files and messages between users. The input validation issue is an HTML injection...

CVE-2004-0122

Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files...

CVE-2002-0321

Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service flooding attacks...