1512 matches found
Yahoo messenger bug
Hi, I found a vulnerability in yahoo messenger that if you receive a Private message with this string "msg:---------------------------------------------iframe onload=$InlineAction:"without quotesYahoo messenger will Crash with a runtime error. Remote crash proof of concept: 1. Open messenger and...
Yahoo! Mail script injection vulnerability
Overview A script injection vulnerability exists in Yahoo! Mail. Description Yahoo! Mail is vulnerable to script injection. Specifically, Yahoo! Mail fails to properly filter the body of email messages for script code. If a remote attacker can persuade a user to open a specially crafted email...
IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net
Article submission: ph4yunshu wustyunshuathotmail.com IE mhtml redirection vulnerability using the method Author: yunshuAtph4nt0m.org Team: http://www.ph4nt0m.org Data: 2006-05-11 This vulnerability is primarily an information leak, seethe specific description. In order to ensure client safety, t...
StatIt 4 - statitpath Remote File Inclusion
StatIt 4 - statitpath Remote File Inclusion !/usr/bin/perl Statit V4 Remote File Inclusion exploit Bug discovered By IGNOR3 [email protected] http://www.smart-boys.com Google Search=inurl:statit.php usage: perl statit.pl perl statit.pl http://target.com/statit/...
Yahoo!Messenger is installed
Yahoo!Messenger - an instant messaging software, which may not be suitable for a business environment - is installed on the remote host. If its use is not compatible with your corporate policy, you should de-install it. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 20...
FarsiNews 2.1 PHP Remote File Inclusion
Remote File Inclusion in FarsiNews 2.1 and below Credit: The information has been provided by Hamid Ebadi Hamid Network Security Team :[email protected]. The original article can be found at : http://hamid.ir/security Vulnerable Systems: FarsiNews 2.1 Beta 2 and below Vulnerable Code: The following...
Ubuntu 4.10 / 5.04 : gaim vulnerability (USN-139-1)
A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented 'a', a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member. Note that Tenable Network Security has...
[Full-disclosure] SEC Consult SA-20050212-1 :: A Word on Webmail Security and Browser related XSS Bugs
SEC-CONSULT Security Discussion Paper 20051202-1 ================================================================================ title: A Word on Webmail Security and Browser related XSS Bugs program: Multiple Webmail Solutions found: --- by: SEC Consult Vulnerability Lab / www.sec-consult.com...
[KAPDA::#14] - PHPPost XSS and HTML Injection
KAPDA New advisory Vendor: http://www.php-post.co.uk/ Vulnerable Version: v1.0 Bug: XSS and HTML Injection Exploitation: Remote with browser Description: -------------------- PHPP is a free message board powered by PHP and MySQL. Vulnerability: -------------------- HTML Injection: The software do...
Yahoo Messenger/Pager DoS Vulnerability
Yahoo Messenger or Pager is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2004-2370
Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name...
CVE-2004-2370
CVE-2004-2370 describes a stack-based buffer overflow in Trillian 0.71–0.74f and Trillian Pro 1.0–2.01 that allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name. Affected component: Trillian client software; root cause: stack-based overflow in proces...
CVE-2005-2444
Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information...
CVE-2005-2444
The CVE-2005-2444 issue affects Trillian Pro 3.1 build 121. When checking Yahoo mail, the application stores the Yahoo password in plaintext in a world-readable file and does not delete the file after login. This creates a local-privilege risk where users on the same machine can read sensitive cr...
Trillian Ver 3.1 saves password's in plain Text
Hi Everyone, I was playing around with Trillian Pro 3.1 Build 121 and noticed a very disturbing behavior when using it to check my yahoo mail. When you choose the option to check your yahoo email from Trillian The little connection ball - Check Yahoo Mail it creates a temp file in the Install...
Trillian instant messenger cleartext passwords leak
Yahoo Mail passwords are stored in common place with in cleartext...
FreeBSD : gaim -- Yahoo! remote crash vulnerability (2701611f-df5c-11d9-b875-0001020eed82)
Jacopo Ottaviani reports that Gaim can be crashed by being offered files with names containing non-ASCII characters via the Yahoo! protocol. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...
Debian DSA-734-1 : gaim - denial of service
Two denial of service problems have been discovered in Gaim, a multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1269 A malformed Yahoo filename can result in a crash of the application. - CAN-2005-1934 A...
RHEL 3 / 4 : gaim (RHSA-2005:518)
An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...
