2852 matches found
CVE-2006-1080
Cross-site scripting XSS vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter, possibly requiring a URL encoded value...
CVE-2006-1080
Game-Panel: CVE-2006-1080 targets login.php via a cross-site scripting (XSS) flaw in the message parameter. Affected versions are 2.6.1 and earlier. The vulnerability allows remote injection of arbitrary script/HTML. The PT-2006-2108 entry provides concrete details: vulnerable component (login.ph...
PT-2006-2108 · Game Panel · Game-Panel
Name of the Vulnerable Software and Affected Versions: Game-Panel versions 2.6.1 and earlier Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in the login.php file. This may require a URL encoded value...
gamepanel.txt
summary software: Game-Panel vendors website: http://game-panel.com versions: = 2.6.1 class: remote status: unpatched exploit: available solution: not available discovered by: sycko risk level: medium description game-panel uses a global variable to print out error messages on their login...
Out of memory crash in Freeciv 2.0.7
Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.0.7 Platforms: Windows, nix, BSD, MacOS and more Bug: bad memory allocation Exploitation: remote, versus server Date: 06 Mar 2006 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...
Multiple Cube / Sauerbraten game engines vulnerabilities
Multiple buffer overflows and DoS conditions...
Multiple Alien Arena 2006 game vulnerabilities
Buffer overflow, format string vulnerability, DoS conditions...
Monopd 0.9.3 - Remote Denial of Service
Monopd 0.9.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/16981/info The Monopd game server is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users...
Game-Panel 2.6 - 'login.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16979/info Game-Panel is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content. An attacker may leverage this iss...
Game-Panel 2.6 - login.php Cross-Site Scripting
Game-Panel 2.6 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16979/info Game-Panel is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated...
Cube <= 2005_08_29 Multiple BoF/Crash Vulnerabilities Exploit
Exploit for unknown platform in category dos / poc ============================================================= Cube include include include define VER "0.1" define PORT 28765 define MAXTRANS 5000 define BOFSZ MAXTRANS + 2400 define MAPSUX...
Game-Panel <= 2.1.6 XSS
ORIGIONAL SOURCE: http://notlegal.ws/gamepanel.txt summary software: Game-Panel vendors website: http://game-panel.com versions: = 2.6.1 class: remote status: unpatched exploit: available solution: not available discovered by: sycko risk level: medium description game-panel uses a global variable...
Monopd 0.9.3 - Remote Denial of Service
source: https://www.securityfocus.com/bid/16981/info The Monopd game server is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users. https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27365.z...
Code injection
Unspecified vulnerability in EmuLinker Kaillera Server before 0.99.17 allows remote attackers to cause a denial of service probably resource consumption via a crafted packet that causes a "ghost game" to be left on the server...
CVE-2006-0771
CVE-2006-0771 affects PunkBuster 1.180 and earlier (as used by Soldier of Fortune II and possibly other games). The issue is a format-string vulnerability in handling invalid cvar values when the server kicks a player and records the reason, allowing remote attackers to cause a denial of service ...
[Full-disclosure] Soldier of Fortune II format string through PunkBuster 1.180
Luigi Auriemma Application: Soldier of Fortune II with PunkBuster enabled http://www.ravensoft.com/soldier2.html http://www.PunkBuster.com Versions: PB for server = 1.180 Platforms: Windows, Linux and Mac Bug: format string Exploitation: remote, versus server in-game Date: 16 Feb 2006 Author: Lui...
Counter Strike (Half Life) game servers DoS
Incomplete client request leads to endless loop...
CVE-2006-0505
zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly creating and closing a game...
