CVE-2006-4975

Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...

CVE-2006-4975

Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...

CVE-2006-4975

CVE-2006-4975 concerns Yahoo! Messenger for WAP, where saving messages that contain JavaScript enables user-assisted remote script/HTML injection via a URL on the service. The vulnerability is tied to how messages could be stored and later rendered, allowing arbitrary script execution in affected...

jetboxInclude.txt

Found by : CarcaBot -- E-mail : CarcaBotx at Yahoo dot com -- $relativescriptpath.'/libs/htmlheader.php -- Exploit -- Google Dork: powered by Jetbox CMS -- http://www.sitename.com/path/includes/phpdig/libs/searchfunction.php?relative scriptpath=Evil Code -- Greets goes to : CarcaBot Administrator...

Yahoo! Messenger < 8.0.0.863 File Extension Spoofing

Binary data 3700.prm...

Yahoo! Messenger 8.0.0.863 - File Extension Spoofing

Yahoo! Messenger 8.0.0.863 - File Extension Spoofing source: https://www.securityfocus.com/bid/19353/info A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error. An attacker may leverage this issue to spoof downloaded filenames to...

Yahoo! Messenger 8.0.0.863 - File Extension Spoofing

source: https://www.securityfocus.com/bid/19353/info A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error. An attacker may leverage this issue to spoof downloaded filenames to unsuspecting users. This issue may lead to a...

Yahoo! Messenger 7.0/7.5 - Remote Search String Arbitrary Browser Navigation

source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary page. This issue occurs because the application fails to sanitize malicious...

Yahoo messenger bug

Hi, I found an another vulnerability in yahoo messenger that if you receive a Private message with this string helomsg:+-/?=/;@$@;+?/?@@-?@+@;?msg:---------------------------------------------embed...

Yahoo messenger bug

Hey there is an error in the message. "4. The remote user will crash closing down her messenger" this bug doesn't crash messenger, simply force yahoo messenger to open "google.com" in the internet explorer. Regards. Pregunta. Responde. Descubri. Todo lo que querias saber, y lo que ni imaginabas,...

Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation

Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary...

Yahoo Messenger instant messenger agent DoS

Application crashes on message with malformed link. Vulnerability is known to be used in-the-wild...

CentOS 3 / 4 : gaim (CESA-2005:518)

An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...

CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...

CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...

CVE-2006-3298

CVE-2006-3298 affects Yahoo! Messenger versions 7.5.0.814 and 7.0.438. The vulnerability allows remote attackers to cause a crash in jscript.dll by sending messages containing non-ASCII characters. The NVD entry, with CVSS v2 base score 5.0 (Medium), lists network access, no authentication, and p...

Mambo Component Pearl 1.6 - Multiple Remote File Inclusions

--------------------------------------------------------------------------- Pearl For Mambo = 1.6 GlobalSettingstemplatesDirectory Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...

Yahoo! Messenger <= 7.5.0.184 Multiple Vulnerabilities

Binary data 3665.prm...

Yahoo! Messenger 7.07.5 - jscript.dll Non-ASCII Character Denial of Service

Yahoo! Messenger 7.07.5 - jscript.dll Non-ASCII Character Denial of Service source: https://www.securityfocus.com/bid/18622/info Yahoo! Messenger is prone to a denial-of-service vulnerability. Successful exploitation will cause the application to crash, effectively denying service. This issue...

Yahoo! Messenger 7.0/7.5 - 'jscript.dll' Non-ASCII Character Denial of Service

source: https://www.securityfocus.com/bid/18622/info Yahoo! Messenger is prone to a denial-of-service vulnerability. Successful exploitation will cause the application to crash, effectively denying service. This issue affects version 7.5.0.814; other versions may also be vulnerable. The following...