2852 matches found
WSN Forum <= 1.3.4 (prestart.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...
E-Uploader Pro <= 1.0 Image Upload with Code Execution Vulnerability
Exploit for unknown platform in category web applications ==================================================================== E-Uploader Pro = 1.0 Image Upload with Code Execution Vulnerability ==================================================================== ::::::::: :::::::::: ::: :::...
Debian DSA-1001-1 : crossfire - buffer overflow
It was discovered that Crossfire, a multiplayer adventure game, performs insufficient bounds checking on network packets when run in 'oldsocketmode', which may possibly lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Half-Life / Counter Strike nosteam game servers DoS
Windows dedicated server crashes on HLTV client connect if client versions is = 27 and LKTV support is enabled svproxies ="1"/...
CVE-2006-4543
Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...
CVE-2006-4543
CVE-2006-4543 is an XSS vulnerability in HLStats 1.34 (index.php). The issue allows remote attackers to inject arbitrary script or HTML via specific parameters across multiple modes: (1) game in players mode, (2) weapon in weaponinfo mode, (3) st in search mode, (4) action in actioninfo mode, and...
gtetrinet game array index overflow
Multiple index overflows...
DSA-1163 gtetrinet - programming error
Bulletin has no description...
CVE-2006-4287
CVE-2006-4287 identifies multiple PHP remote file inclusion vulnerabilities in the NES Game and NES System (c108122 and earlier). The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the (1) phphtmllib parameter to phphtmllib/includes.php and in various widgets/scr...
EUVD-2006-4275
Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 phphtmllib parameter to a phphtmllib/includes.php; tagutils/ scripts including b divtagutils.php, c formutils.php, d...
CVE-2006-4287
Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 phphtmllib parameter to a phphtmllib/includes.php; tagutils/ scripts including b divtagutils.php, c formutils.php, d...
[SA21593] NES Game & NES System "phphtmllib" File Inclusion
TITLE: NES Game & NES System "phphtmllib" File Inclusion SECUNIA ADVISORY ID: SA21593 VERIFY ADVISORY: http://secunia.com/advisories/21593/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: NES Game & NES System http://secunia.com/product/11630/ DESCRIPTION: Kacper has...
NES Game and NES System <= c108122 File Include Vulnerabilities
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - NES Game & NES System = c108122 phphtmllib Remote File Include Vulnerability + + + - Script name: NES Game & NES System v. c108122 - Script site: http://sourceforge.net/projects/nesgame + + + - Find by:...
NES Game and NES System c108122 - Remote File Inclusion
/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - NES Game & NES System = c108122 phphtmllib Remote File Include Vulnerability + + + - Script name: NES Game & NES System v. c108122 - Script site: http://sourceforge.net/projects/nesgame + + + - Find by: Kacper a.k.a Rahim + - Contact:...
DEBIAN-CVE-2006-4005
BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...
CVE-2006-3908
Format string vulnerability in the flushoutput function in ConsoleStreambuf.cpp in Game Network Engine GNE 0.70 and earlier allows remote attackers to cause a denial of service crash and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console...
CVE-2006-3908
CVE-2006-3908 affects Game Network Engine (GNE) versions up to 0.70, via a format-string vulnerability in the flush_output function of ConsoleStreambuf.cpp. The flaw allows remote attackers to crash the process and potentially execute code through format specifiers when output is sent to the gout...
CVE-2006-3908
Format string vulnerability in the flushoutput function in ConsoleStreambuf.cpp in Game Network Engine GNE 0.70 and earlier allows remote attackers to cause a denial of service crash and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console...