119 matches found
Counter-Strike 1.6 game client 0-day exploited to spread Belonard trojan
By Waqas Dr. Web’s cybersecurity researchers have identified an attacker is trying to exploit zero-day vulnerabilities in Counter-Strike 1.6 game specifically to distribute Belonard Trojan. Reportedly, about 39% of all the active servers of the game on Steam have been manipulated and compromised ...
Zero-Days in Counter-Strike Client Used to Build Major Botnet
A proprietor of a Counter-Strike gaming server promotion service has used multiple zero-days in the Counter-Strike client to create a large botnet. The network is made up of fake game servers for the popular online multiplayer game. The attacker has had quite a bit of success. In a recent analysi...
Zero-Day Flaws in Counter-Strike 1.6 Let Malicious Servers Hack Gamers' PCs
If you are a Counter-Strike gamer, then beware, because 39% of all existing Counter-Strike 1.6 game servers available online are malicious that have been set-up to remotely hack gamers' computers. A team of cybersecurity researchers at Dr. Web has disclosed that an attacker has been using malicio...
Zero-Day Flaws in Counter-Strike 1.6 Let Malicious Servers Hack Gamers' PCs
If you are a Counter-Strike gamer, then beware, because 39% of all existing Counter-Strike 1.6 game servers available online are malicious that have been set-up to remotely hack gamers' computers. A team of cybersecurity researchers at Dr. Web has disclosed that an attacker has been using malicio...
Valve: Malformed map detailed texture files in GoldSrc games lead to Remote Code Execution
A crafted map detailed texture file maps/detail.txt can be used to exploit a stack overflow vulnerability in hw.dll that can lead to remote code execution. Reproduction I used Counter-Strike for PoCs. Using a listen server - Place attached csassaultdetail.txt in cstrike/maps folder - Start the ga...
Valve: GoldSrc: Buffer Overflow in DELTA_ParseDelta function leads to RCE
Description The bug is triggered by 2 packets. First one is svcdeltadescription which describes memory layout of such structures as eventt, weapondatat, ... It is sent as a list of fields' descriptions: type, offset and others. Next, DELTAParseDelta fills these structures when corresponding delta...
Valve: Malformed .BMP file in Counter-Strike 1.6 may cause shellcode injection
With the vulnerability of the GoldSource Engine, the server is able to perform remote code execution on the client, overwriting the stack when reading the BMP file. The problem is in the LoadBMP8 function, which is executed when the player connects to the server, by loading the...
Multiples Nexon Games - Unquoted Path Privilege Escalation
Multiples Nexon Games - Unquoted Path Privilege Escalation ----------------------------------------------------------------------------------------------------------------- Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities Date: 13/05/2016 Exploit Author :...
Nexon Games - Unquoted Path Privilege Escalation
Exploit for windows platform in category local exploits ----------------------------------------------------------------------------------------------------------------- Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities Date: 13/05/2016 Exploit Author : Cyr...
Nexon Games Privilege Escalation
----------------------------------------------------------------------------------------------------------------- Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities Date: 13/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.nexon.net/...
Multiples Nexon Games - Unquoted Path Privilege Escalation
----------------------------------------------------------------------------------------------------------------- Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities Date: 13/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.nexon.net/...
Counter-Strike 1.6 - GameInfo Query Reflection Denial of Service (PoC)
Counter-Strike 1.6 - GameInfo Query Reflection Denial of Service PoC !/usr/bin/perl Counter-Strike 1.6 'GameInfo' Query Reflection DoS Proof Of Concept Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg...
Counter-Strike 1.6 GameInfo Query Reflection Denial Of Service Exploit
Exploit for multiple platform in category dos / poc !/usr/bin/perl Counter-Strike 1.6 'GameInfo' Query Reflection DoS Proof Of Concept Copyright 2015 c Todor Donev email protected http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg http://pastebin.com/u/hackerscommunity...
Counter Strike Portals 'download' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27747/info Counter Strike Portals is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Counter Strike 2D <= 0.1.0.1 - Denial of Service Vulnerability
No description provided by source. / Counter Strike 2D DoS Affected versions: 0.1.0.1 and prior CS2D Developer: http://www.cs2d.com/ by Iman Karim [email protected] http://home.inf.fh-rhein-sieg.de/ikarim2s/ Written in Borland C++ Builder 6 20.09.2005 / include winsock.h...
Half-Life CSTRIKE Server 1.6 - Denial of Service Exploit (no-steam)
No description provided by source. ---- Counter Strike 1.6 Denial Of Service POC ... ITDefence.ru Antichat.ru Counter Strike 1.6 Denial Of Service POC Eugene Minaev [email protected] Bug was found by Maxim Suhanov THE FUF works only with no-steam servers / \ \ \ / .\ / /// // / \ / \ // / /...
Counter Strike Source ManiAdminPlugin 2.0 - Remote Crash Exploit
No description provided by source. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@ Counter strike source @@@@@ @@@@@ Mani Admin Plugin Exploit v2 @@@@@ @@@@@ M4rt1n. www.hackerzbay.com @@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ alias aspam...
Bitcoin mining malware found in E-Sports Entertainment (ESEA) software
+software.png The Bitcoin mining rig is becoming a popular alternative to people who want an easy way to earn the digital currency. All you have to do is plug the hardware that specializes in Bitcoin mining and run its customized software. After that, you can sit back and relax as it mines the...
Bitcoin mining malware found in E-Sports Entertainment (ESEA) software
+software.png+software.png The Bitcoin mining rig is becoming a popular alternative to people who want an easy way to earn the digital currency. All you have to do is plug the hardware that specializes in Bitcoin mining and run its customized software. After that, you can sit back and relax as it...
Counter Strike Servers Remote Reset Points & DDoS
Exploit for multiple platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...