EUVD-2012-0854

Malware in sbrugna...

EUVD-2001-0777

Malware in sbrugna...

EUVD-2002-0006

Malware in sbrugna...

EUVD-2009-0319

Malware in sbrugna...

CVE-2009-0315

Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

XChat 2.6.7 (Windows) - Remote Denial of Service

/str0ke /exec -o perl -e 'print "\x9x\xF0\x92\x8D\x85\xF1\xA5\x90\xB4\xF1\x96\x9E\x85\xF1\xA6\x8D\xA5\xF1\xB8\xA5\x85\xF1\xA7\x95\xA8\x29\xF2\x95\x95\x82"' ? ?php // XChat = 2.6.7 Windows Remote Crash DoS by ratboy // Tested on Windows SP1/SP2 // The following bug was tested on the XChat = 2.6.7 ...

Debian DSA-099-1 : xchat - IRC session hijacking

zen-parse found a vulnerability in the XChat IRC client that allows an attacker to take over the users IRC session. It is possible to trick XChat IRC clients into sending arbitrary commands to the IRC server they are on, potentially allowing social engineering attacks, channel takeovers, and deni...

CVE-2001-0792

CVE-2001-0792 describes a format-string vulnerability in XChat 1.2.x that lets remote attackers execute arbitrary code via a malformed nickname. The provided documents identify the affected product as XChat 1.2.x and classify the issue as a remote, unauthenticated vector with potential for arbitr...

CVE-2001-0792

Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname...

GLSA-200404-15 : XChat 2.0.x SOCKS5 Vulnerability

The remote host is affected by the vulnerability described in GLSA-200404-15 XChat 2.0.x SOCKS5 Vulnerability The SOCKS 5 proxy code in XChat is vulnerable to a remote exploit. Users would have to be using XChat through a SOCKS 5 server, enable SOCKS 5 traversal which is disabled by default and...

XChat Malformed Nickname Remote Format String

Binary data 1873.prm...

Mandrake Linux Security Advisory : xchat (MDKSA-2004:036)

A remotely exploitable vulnerability was discovered in the Socks-5 proxy code in XChat. By default, socks5 traversal is disabled, and one would also need to connect to an attacker's own custom proxy server in order for this to be exploited. Successful exploitation could lead to arbitrary code...

XChat 1.8.0/2.0.8 socks5 - Remote Buffer Overflow

/ X-Chatv1.8.0 - v2.0.8: socks-5 remote buffer overflow exploit. by: vade79/v9 v9 fakehalo deadpig org fakehalo/realhalo X-Chat homepage: http://www.xchat.org compile: cc xxchat-socks5.c -o xxchat-socks5 trigger bug/workingsX-Chat socks-5 comminucation: 0x05,0x00 0x05,0x00,0x00,0x03 0x?? t...

XChat 1.8.02.0.8 socks5 - Remote Buffer Overflow

XChat 1.8.02.0.8 socks5 - Remote Buffer Overflow / X-Chatv1.8.0 - v2.0.8: socks-5 remote buffer overflow exploit. by: vade79/v9 v9 fakehalo deadpig org fakehalo/realhalo X-Chat homepage: http://www.xchat.org compile: cc xxchat-socks5.c -o xxchat-socks5 trigger bug/workingsX-Chat socks-5...

[ GLSA 200404-15 ] XChat 2.0.x SOCKS5 Vulnerability

Gentoo Linux Security Advisory GLSA 200404-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

XChat 2.0.x SOCKS5 Vulnerability

Background XChat is a multiplatform IRC client. Description The SOCKS 5 proxy code in XChat is vulnerable to a remote exploit. Users would have to be using XChat through a SOCKS 5 server, enable SOCKS 5 traversal which is disabled by default and also connect to an attacker's custom proxy server...

CVE-2004-0409

Removed by vendor...

xchat remotely exploitable buffer overflow (Socks5)

A straightforward stack buffer overflow exists in XChat's Socks5 proxy support. The XChat developers report that tsifra' discovered this issue. NOTE: XChat Socks5 support is disabled by support in the FreeBSD Ports Collection...

CVE-2003-1000

xchat 2.0.6 allows remote attackers to cause a denial of service crash via a passive DCC request with an invalid ID number, which causes a null dereference...

CVE-2003-1000

Removed by vendor...