← Back

Eggheads

eggheads

4 CVEs • 3 products

Products (3)

Click to collapse
Toggle

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Eggheads
1Eggdrop Docker Image
Jun 17, 2026
Dec 8, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to ac...Show more
The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.Show less
2Eggheads
Philip Moore
3Eggdrop
Eggdrop Irc BotWindrop
Apr 23, 2026
May 26, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string leng...Show more
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.Show less
1Eggheads
1Eggdrop Irc Bot
Apr 23, 2026
May 22, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
1Eggheads
1Eggdrop Irc Bot
Apr 16, 2026
Nov 23, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and...Show more
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.Show less