150 matches found
CVE-2022-31262
CVE-2022-31262 GOG Galaxy 2.X LPE 익스플로잇 CVE-2022-31262 테스트된 버전 2.0.46 - 2.0.51 11.08.2022 기준 최신, 이전 버전도 취약할 수 있음 해당 발견에 관한 블로그 게시물: https://secure77.de/gog-galaxy-cve-2022-31262/ LPE는 다음을 통해 발견됨: https://github.com/secure-77/PSAccessFinder POC 데모 cpp 지원에 대해 Wh04m1001님께 감사드립니다...
CVE-2019-15511
CVE-2019-15511 대상 GOG Galaxy 익스플로잇 usage: exploit.py -h --action LaunchElevatedRequest,FixDirectoryPrivilegesRequest,CreateDirectoryRequest,QueryProcessInfoRequest,InstallServiceRequest,DeleteServiceRequest,MoveAndVerifyGlobalDependencyRequest target positional arguments: target optional argument...
CVE-2020-25769
GOG Galaxy 로컬 권한 상승 - CVE-2020-25769 GOG Galaxy 2.0은 CD Project가 개발한 플랫폼으로, 스토어프론트, 소프트웨어 배포, 소셜 네트워크 및 통합 게임 런처로 설계되었습니다. Windows에서 클라이언트는 권한 있는 작업을 처리하기 위해 GalaxyClientService 구성 요소에 의존합니다. 이 애플리케이션은 권한 있는 작업을 요청하는 사람의 신원을 제대로 확인하지 않습니다. 이 상황은 로컬 권한 상승 취약점을 얻기 위해 악용될 수 있습니다. 요약 제목: GOG Galaxy의 ...
CVE-2023-50914
A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...
CVE-2022-31262
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as...
CVE-2020-24574
The client aka GalaxyClientService.exe in GOG GALAXY through 2.0.41 as of 12:58 AM Eastern, 9/26/21 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into...
CVE-2025-56232
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
CVE-2025-56232
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
CVE-2025-56232
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
GOG Galaxy 安全漏洞
GOG Galaxy is a game client program from the Polish company GOG. The program is used to install, launch and update games. A security vulnerability exists in GOG Galaxy version 2.0.0.2, which stems from a lack of SSL certificate validation, and could lead to a man-in-the-middle attack that could...
PT-2025-45152
Name of the Vulnerable Software and Affected Versions GOG Galaxy version 2.0.0.2 Description GOG Galaxy version 2.0.0.2 is susceptible to a missing SSL certificate validation issue. An attacker with control over the local network, DNS, or a proxy can conduct a man-in-the-middle MitM attack. This...
CVE-2025-56232
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
CVE-2025-56232: Missing Validation of OpenSSL Certificate
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
CVE-2025-56232
The game client GOG Galaxy version 2.0.0.2 is vulnerable to a Missing SSL Certificate Validation issue. This security flaw allows an attacker who controls the local network, DNS, or a proxy to perform a man-in-the-middle (MitM) attack. By intercepting update requests, the attacker can replace leg...
CVE-2025-56232
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
EUVD-2025-37923
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...
EUVD-2020-17293
Malware in sbrugna...
EUVD-2018-15760
Malware in sbrugna...