Show filters
17 Total Results
Displaying 1-10 of 17
Sort by:
Attacker Value
Unknown
CVE-2023-28414
Disclosure Date: May 12, 2023 (last updated October 08, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ApexChat plugin <= 1.3.1 versions.
0
Attacker Value
Unknown
CVE-2012-0828
Disclosure Date: February 21, 2020 (last updated February 21, 2025)
Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).
0
Attacker Value
Unknown
CVE-2016-2087
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.
0
Attacker Value
Unknown
CVE-2016-2233
Disclosure Date: January 18, 2017 (last updated November 25, 2024)
Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.
0
Attacker Value
Unknown
CVE-2013-7449
Disclosure Date: April 21, 2016 (last updated November 25, 2024)
The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
0
Attacker Value
Unknown
CVE-2011-5129
Disclosure Date: August 30, 2012 (last updated October 05, 2023)
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.
0
Attacker Value
Unknown
CVE-2009-3822
Disclosure Date: October 28, 2009 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter to tests/ajcuser.php.
0
Attacker Value
Unknown
CVE-2009-0315
Disclosure Date: January 28, 2009 (last updated October 04, 2023)
Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
0
Attacker Value
Unknown
CVE-2008-2841
Disclosure Date: June 24, 2008 (last updated October 04, 2023)
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.
0
Attacker Value
Unknown
CVE-2006-4455
Disclosure Date: August 30, 2006 (last updated November 08, 2023)
Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors involving the PRIVMSG command. NOTE: the vendor has disputed this vulnerability, stating that it does not affect 2.6.7 "or any recent version"
0
