CVE-2020-37211

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37211

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37211 SpotIM 2.2 - 'Name' Denial Of Service

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37211

SpotIM 2.2 contains a denial-of-service vulnerability where pasting a 1000-character payload into the registration Name field crashes the application. CVSS v3.1 base score 7.5 (NETWORK, HIGH, no user interaction) and CVSS v4.0 base score 4.6 (LOCAL, MEDIUM) are provided. Exploit references exist ...

CVE-2020-37211 SpotIM 2.2 - 'Name' Denial Of Service

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37211: Buffer Copy without Checking Size of Input

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

Nsasoft SpotIM 安全漏洞

Nsasoft SpotIM is a password recovery tool developed by the US company Nsasoft. Version 2.2 of Nsasoft SpotIM contains a security vulnerability; this vulnerability stems from a buffer overflow in the registration name input field, which may cause the application to crash...

CVE-2017-18608

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

EUVD-2017-9721

Malware in sbrugna...

SpotIM 2.2 - (Name) Denial Of Service Exploit

Exploit Title: SpotIM 2.2 - 'Name' Denial Of Service Exploit Author : Ismail Tasdelen Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/spotimsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept PoC: ======================= 1.Download and...

SpotIM 2.2 - 'Name' Denial Of Service

Exploit Title: SpotIM 2.2 - 'Name' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/spotimsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept PoC:...

SpotIM 2.2 - Name Denial Of Service

SpotIM 2.2 - Name Denial Of Service Exploit Title: SpotIM 2.2 - 'Name' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/spotimsetup.exe Tested on OS: Windows 10 CVE : N/A '''...

WordPress spotim-comments plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. spotim-comments is a user interaction plugin used in it, which includes features such as real-time comments, online chat, and...

CVE-2017-18608

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

Cross site scripting

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

CVE-2017-18608

The CVE-2017-18608 entries describe multiple cross-site scripting (XSS) flaws in the Spot.im / spotim-comments WordPress plugin prior to version 4.0.4. Several connected advisories (Red Hat, CNVD, CVE records, and WPVulnDB) corroborate that the vulnerability affects the WordPress plugin as used i...

CVE-2017-18608

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

CVE-2017-18608: Improper Neutralization of Input During Web Page Generation

The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues...

SpotIM 2.2 - Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: SpotIM 2.2 - 'Name/Key' Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: http://www.nsauditor.com Software Link http://www.nsauditor.com/downloads/spotimsetup.exe Version: 2.2 Tested on: Windows 10 Proof of Concept: 1.- Run the python script...

SpotIM 2.2 - Denial of Service (PoC)

SpotIM 2.2 - Denial of Service PoC -- coding: utf-8 -- Exploit Title: SpotIM 2.2 - 'Name/Key' Denial of Service PoC Date: 09/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.nsauditor.com Software Link http://www.nsauditor.com/downloads/spotimsetup.exe Version: 2.2 Tested on: Windows...