shout vulnerabilities and exploits

(subscribe to this query)

Shout is an IRC client. Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser. Affects shout >=0.44.0 <=0.49.3.

Shout Project Shout

Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote malicious users to cause a denial of service and execute arbitrary code via a long request to TCP port 8001.

Analogx Simpleserver Shout 1.0

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT allows Reflected XSS. This issue affects SHOUT: from n/a up to and including 3.5.3.

Lambertgroup Shout

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup SHOUT allows SQL Injection. This issue affects SHOUT: from n/a up to and including 3.5.3.

Lambertgroup Shout

A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. A user's saved passwords may be read aloud by VoiceOver.

Apple Ios And Ipados Apple Ipados Apple Iphone Os

1 Article

This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated.

Apple Ios And Ipados Apple Ipados Apple Iphone Os

1 Article

Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote malicious users to inject arbitrary web script or HTML via the shout parameter in a shout action.

Dragonbyte-tech Vbshout

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in main.php in SF-Shoutbox 1.2.1 up to and including 1.4 allow remote malicious users to inject arbitrary web script or HTML via the (1) nick (aka Name) and (2) shout (aka Shout) parameters.

Script-fun Sf-shoutbox 1.2.1 Script-fun Sf-shoutbox 1.4

Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.

Php-fusion Php-fusion 9.03.60

Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote malicious users to inject arbitrary PHP code into shouts.php via the shout parameter.

Shoutpro Shoutpro

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook