234 matches found
Nintendo: [WiiU/Switch] nullptr dereference in the ENL framework
Vulnerability description not provided...
Team Xecuter hacker gets 40 months in prison for Nintendo Switch hacks
By Waqas Gary W. Bowser, aka GaryOPA 52 was arrested for his role in creating/selling illegal devices and software that… This is a post from HackRead.com Read the original post: Team Xecuter hacker gets 40 months in prison for Nintendo Switch hacks...
A week in security (January 17 – 23)
Last week on Malwarebytes Labs: CISA calls for urgent action against critical threats Red Cross begs attackers to “Do the right thing” after family reunion service compromised Update now! Chrome patches critical RCE vulnerability in Safe Browsing Combatting SMS and phone fraud: UK government issu...
A week in security (January 17 — 23)
Last week on Malwarebytes Labs: CISA calls for urgent action against critical threats Red Cross begs attackers to “Do the right thing” after family reunion service compromised Update now! Chrome patches critical RCE vulnerability in Safe Browsing Combatting SMS and phone fraud: UK government issu...
Nintendo warns of imitation websites and suspicious hardware
Brave indeed is the soul who decides to take on Nintendo with scam-filled behaviour online. The console legends have a long history of crunching down on fraud, as well as gaming past-times some would consider to be harmless. Whether you create fan-made games, offer up plundered ROMs for use in...
Nintendo Sues Video-Game Pirates
Gaming giant Nintendo has filed a lawsuit against video-game piracy group ringleader Gary Bowser, a Canadian national behind Team Xecuter, which law enforcement said built and sold hacking devices that enabled consoles to play unauthorized versions of games. Download “The Evolution of Ransomware”...
nintendo.site123.me Cross Site Scripting vulnerability OBB-1478194
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
nintendo.se Cross Site Scripting vulnerability OBB-1442127
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
nintendo.no Cross Site Scripting vulnerability OBB-1442117
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
nintendo.dk Cross Site Scripting vulnerability OBB-1442102
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Team Xecuter members arrested for selling Nintendo Switch hacks
By Deeba Ahmed Max Louarn, Yuanning Chen, and Gary Bowser who are alleged members of Team Xecuter were charged with 11 felony counts. This is a post from HackRead.com Read the original post: Team Xecuter members arrested for selling Nintendo Switch hacks...
A week in security (September 28 – October 4)
Last week on Malwarebytes Labs, we dug into what happens when card fraud comes calling, we gave a rundown on some novel ransomware attacks that took advantage of smart coffee makers, and we introduced VideoBytes, our new, monthly series in which well provide video coverage of some of the...
Rite Aid Used Facial Recognition in Stores for Nearly a Decade
A SubStack email mess, a Nintendo leak, and more of the week's top security news...
Nintendo: Arbitrary code execution in TSEC Heavy Secure, return-oriented programming in TSEC Secure ROM, and recovery of TSEC-derived cryptographic secrets
The vulnerability in TSEC Heavy Secure allowed for arbitrary code execution. A return-oriented programming vulnerability was discovered in the TSEC Secure ROM. Cryptographic secrets derived from TSEC were recovered...
Nintendo: [3DS][StreetPass] Heap Overflow in Swapnote parser leads to userland StreetPass RCE
Affected Systems - System: Nintendo 3DS - Version: = 11.13 - Region: ALL Description When parsing TLRF chunks in message files the application calls memcpy using user provided sizes to copy controlled data over a fixed-size buffer. Thus one can overflow heap chunks which is enough to get code...
Nintendo: [3DS][SSL][SDK] Unchecked number of audio channels in Mobiclip SDK leads to RCE in eShop movie player
Affected Systems - Platform: New Nintendo 3DS - Region: ALL - System version: 11.13 latest at the time of writing Description The Mobiclip SDK used for parsing moflex videos does not check the number of audio channels in an audio stream. This leads to a miscalculation of free space remaining in a...
Nintendo: [3DS][SSL] Use of uninitialized class member leads to RCE in eShop movie player
Affected Systems - Platform : New Nintendo 3DS - Region: ALL - System version: 11.13 latest at the time of writing Description The eShop video player does not initialize pointers to some decoder objects when creating a video player object. With a specific audio codec this induces the use of...
Nintendo: [3DS][SSL] Improper certificate validation allows an attacker to perform MitM attacks
Affected Systems - Platform: New Nintendo 3DS - Region: ALL - System version: = 11.13 Description The SSL system module does not properly validate the x509 certificates when establishing an SSL/TLS connection. Actually, the SSL system module does not check the signatures when validating a...
A brief history of video game saves and data modification
Games consoles and handhelds have always been an interesting battleground for hacking activities. The homebrew scene for using hardware in interesting ways has a long and varied history, especially where porting games to run on different platforms is concerned. Tampering with games while playing...
CVE-2020-13109
Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem because 0x800b3e94 aka the IF subcommand to top-level command 7 has a stack-based buffer overflow...